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EMBEDDED WFR SERVER 



COPYWCHT NOTICE 

The tables attached to the disclosure of this patent contain material that is subject to 
copyright protection. The copyright owner has no objection to the facsimile reproduction by 
anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark 
Office patent file or records, but otherwise reserves all copyright rights whatsoever. 



T APLES 

10 Table A is a functional specification of the Agranat Systems, Inc. Em Web™ product; and 

Table B is a source code listing in the C programming language of header files defining 

data structures representing an archive of content as used by the Em Web™ product. 

The noted tables are provided to show an example of a particular embodiment of the 

invention incorporating features thereof which are described in detail below. 

15 

CROSS-REFERENCE TO RELATED APPLICATION 

Priority is claimed under 35 U.S.C. §1 19(e) to the inventors' Provisional U.S. Patent 
Application Serial No. 08/023,373, entitled EXTENDED LANGUAGE COMPILER AND RUN 
TIME SERVER, filed August 8, 1996, now pending. The inventors 1 above-identified provisional 
20 U.S. patent application is incorporated herein by reference. 



The present invention relates generally to graphical user interfaces (GUIs), i.e. user 
interfaces in which information can be presented in both textual form and graphical form. More 
25 particularly, the invention relates to GUIs used to control, manage, configure, monitor and 

diagnose software and hardware applications, devices and equipment using a World-Wide- Web 
client/server communications model. Yet more particularly, the invention relates to methods and 
apparatus for developing and using such GUIs based on a World- Wide- Web client/server 
communications model. 
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2. Related Art 

Many modern communications, entertainment and other electronic devices require or 
could benefit from improved local or remote control, management, configuration, monitoring 
and diagnosing. It is common for such devices to be controlled by a software application 

5 program specifically written for each device. The design of such a device includes any hardware 
and operating environment software needed to support the application, which is then referred to 
as an embedded application, because it is embedded within the device. Embedded application 
programs are generally written in a high-level programming language such as C, C++, etc., 
referred to herein as a native application programming language. Other languages suitable to 

10 particular uses may also be employed. The application program communicates with users 
through a user interface, generally written in the same high-level language as the application. 

The representation of an application in a native application programming language is 
referred to as the application program source code. A corresponding representation which can be 
executed on a processor is referred to as an executable image. 

15 Before an application written in a high-level language can be executed it must be 

compiled and linked to transform the application source code into an executable image. A 
compiler receives as an input a file containing the application source code and produces as an 
output a file in a format referred to as object code. Finally, one or more object code files are 
linked to form the executable image. Linking resolves references an object module may make 

20 outside of that object module, such as addresses, symbols or functions defined elsewhere. 

Source code may also define arrangements by which data can be stored in memory and 
conveniently referred to symbolically. Such defined arrangements are referred to as data 
structures because they represent the physical arrangement of data within memory, i.e., the 
structure into which the data is organized. 

25 Most commonly, remote control, management, configuration, monitoring and diagnosing 

applications employ unique proprietary user interfaces integrated with the application software 
and embedded into the device. Frequently these user interfaces present and receive information 
in text form only. Moreover, they are not portable, generally being designed to operate on a 
specific platform, i.e., combination of hardware and software. The devices for which control, 

30 management, configuration and diagnosing are desired have only limited run-time resources 
available, such as memory and long-term storage space. Proprietary interfaces are frequently 
designed with such limitations to data presentation, data acquisition and portability because of 
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the development costs incurred in providing such features and in order to keep the size and run- 
time resource requirements of the user interface to a minimum. Since each user interface tends to 
be unique to the particular remote control, management, configuration, monitoring or diagnosing 
function desired, as well as unique to the operating system, application and hardware platform 

5 upon which these operations are performed, significant time and/or other resources may be 
expended in development. Graphics handling and portability have therefore been considered 
luxuries too expensive for most applications. 

However, as the range of products available requiring control, management, 
configuration, monitoring or diagnosing increase, such former luxuries as graphical presentation 

10 and portability of the interface from platform to platform have migrated from the category of 
luxuries to that of necessities. It is well known that information presented graphically is more 
quickly and easily assimilated than the same information presented as text. It is also well known 
that a consistent user interface presented by a variety of platforms is more likely to be understood 
and properly used than unique proprietary user interfaces presented by each individual platform. 

1 5 Therefore, portable GUIs with low run-time resource requirements are highly desirable. 

With the growing popularity and expansion of the Internet, one extremely popular public 
network for communications between computer systems, and development of the World-Wide- 
Web communication and presentation model, a new paradigm for communication of information 
has emerged. 

20 The World- Wide- Web and similar private architectures such as internal corporate LANs, 

provide a "web" of interconnected document objects. On the World- Wide- Web, these document 
objects are located on various sites on the global Internet. The World-Wide- Web is also 
described in "The World-Wide Web, " by T. Berners-Lee, R. Cailliau, A. Luotonen, H. F. 
Nielsen, and A. Secret, Communications of the ACM. 37 (8), pp. 76-82, August 1994, and in 

25 "World Wide Web: The Information Universe," by Berners-Lee, T., et al., in Electronic 

Networking; Research, Applications and Policy. Vol. 1, No. 2, Meckler, Westport, Conn., Spring 
1992. On the Internet, the World-Wide-Web is a collection of documents (i.e., content), client 
software (i.e.. browsers) and server software (i.e., servers) which cooperate to present and receive 
information from users. The World- Wide- Web is also used to connect users through the content 

30 to a variety of databases and services from which information may be obtained. However, except 
as explained below, the World-Wide- Web is based principally on static information contained in 
the content documents available to the browsers through the servers. Such a limitation would 
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make the World- Wide- Web paradigm useless as a GUI which must present dynamic information 
generated by a device or application. 

The World- Wide- Web communications paradigm is based on a conventional client-server 
model. Content is held in documents accessible to servers. Clients can request, through an 
5 interconnect system, documents which are then served to the clients through the interconnect 
system. The client software is responsible for interpreting the contents of the document served, 
if necessary. 

Among the types of document objects in a "web" are documents and scripts. Documents 
in the World-Wide- Web may contain text, images, video, sound or other information sought to 

10 be presented, in undetermined formats known to browsers or extensions used with browsers. The 
presentation obtained or other actions performed when a browser requests a document from a 
server is usually determined by text contained in a document which is written in Hypertext Mark- 
up Language (HTML). HTML is described in HvperText Markup Langu age Specification - 2.0 . 
by T. Berners-Lee and D. Connolly, RFC 1866, proposed standard, November 1995, and in 

15 "World Wide Web & HTML," by Douglas C. McArthur, in Dr. Dobbs Journal - December 1994, 
pp. 1 8-20, 22, 24, 26 and 86. HTML documents stored as such are generally static, that is, the 
contents do not change over time except when the document is manually modified. Scripts are 
programs that can generate HTML documents when executed. 

HTML is one of a family of computer languages referred to as mark-up languages. 

20 Mark-up languages are computer languages which describe how to display, print, etc. a text 

document in a device-independent way. The description takes the form of textual tags indicating 
a format to be applied or other action to be taken relative to document text. The tags are usually 
unique character strings having defined meanings in the mark-up language. Tags are described 
in greater detail, below. 

25 HTML is used in the World- Wide- Web because it is designed for writing hypertext 

documents. The formal definition is that HTML documents are Standard Generalized Markup 
Language (SGML) documents that conform to a particular Document Type Definition (DTD). 
An HTML document includes a hierarchical set of markup elements, where most elements have 
a start tag, followed by content, followed by an end tag. The content is a combination of text and 

30 nested markup elements. Tags are enclosed in angle brackets ('<' and '>*) and indicate how the 
document is structured and how to display the document, as well as destinations and labels for 
hypertext links. There are tags for markup elements such as titles, headers, text attributes such as 
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bold and italic, lists, paragraph boundaries, links to other documents or other parts of the same 
document, in-line graphic images, and many other features. 
For example, here are several lines of HTML: 

Some words are <B>bold<7B>, others are <I>italic</I>. Here we start a new 
5 paragraph.<P>Here's a link to 

the <A HREF= M http://www.agranatxom"> Agranat Systems, Inc.</A> home 
page. 

This sample document is a hypertext document because it contains a "link" to another 
10 document, as provided by the "HREF=. M The format of this link will be described below. A 
hypertext document may also have a link to other parts of the same document. Linked 
documents may generally be located anywhere on the Internet. When a user is viewing the 
document using a client program called a Web browser (described below), the links are displayed 
as highlighted words or phrases. For example, using a Web browser, the sample document above 
1 5 would be displayed on the user's screen as follows: 

Some words are bold, others are italic. Here we start a new paragraph. 
Here's a link to A granat Systems. Inc. home page. 
In the Web browser, the link may be selected, for example by clicking on the highlighted 
area with a mouse. Selecting a link will cause the associated document to be displayed. Thus, 
20 clicking on the highlighted text "Agranat Systems, Inc." would display that home page. 

Although a browser can be used to directly request images, video, sound, etc. from a 
server, more usually an HTML document which controls the presentation of information served 
to the browser by the server is requested. However, except as noted below, the contents of an 
HTML file are static, i.e., the browser can only present a passive snapshot of the contents at the 
25 time the document is served. In order to present dynamic information, i.e., generated by an 
application or device, or obtain from the user data which has been inserted into an HTML- 
generated form, conventional World- Wide- Web servers use a "raw" interface, such as the 
common gateway interface (CGI), explained below. HTML provides no mechanism for 
presenting dynamic information generated by an application or device, except through a raw 
30 interface, such as the CGI. Regarding obtaining data from the user for use by the application or 
device, although standard HTML provides a set of tags which implement a convenient 
mechanism for serving interactive forms to the browser, complete with text fields, check boxes 
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and pull-down menus, the CGI must be used to process submitted forms. Form processing is 
important to remote control, management, configuration, monitoring and diagnosing applications 
because forms processing is a convenient way to configure an application according to user input . 
using the World-Wide-Web communications model. But, form processing using a CGI is 

5 extremely complex, as will be seen below, requiring an application designer to learn and 
implement an unfamiliar interface. A CGI is therefore not a suitable interface for rapid 
development and prototyping of new GUI capabilities. Moreover, a developer must then master 
a native application source code language (e.g., C, C++, etc.), HTML and the CGI, in order to 
develop a complete application along with its user interface. 

10 Models of the World- Wide- Web communications paradigm for static content and 

dynamic content are shown in Figs. 14 and 15, respectively. As shown in Fig. 14, a browser 
1401 makes a connection 1402 with a server 1403, which serves static content 1405 from a 
storage device 1407 to the browser 1401 . In the case of dynamic content, shown in Fig. 1 5, the 
server 1403 passes control of the connection 1402 with the browser 1401 to an application 1501, 

] 5 through the CGI 1 503. The application 1 501 must maintain the connection 1402 with the 
browser 1401 and must pass control back to the server 1403 when service of the request which 
included dynamic content is complete. Furthermore, during service of a request which includes 
dynamic content, the application 1501 is responsible for functions normally performed by the 
server 1403, including maintaining the connection 1402 with the browser 1401, generating 

20 headers in the server/browser transport protocol, generating all of the static and dynamic content 
elements, and parsing any form data returned by the user. Since use of the CGI 1 503 or other 
raw interface forces the application designer to do all of this work, applications 1501 to which 
forms are submitted are necessarily complex. 

In order to provide dynamic content to a browser, the World-Wide-Web has also evolved 

25 to include Java and other client side scripting languages, as well as some server side scripting 
languages. However, these languages are interpreted by an interpreter built into the browser 
1401 or server 1403, slowing down the presentation of information so generated. In the case of 
client side scripting, the script does not have any direct access to the application or to application 
specific information. Therefore, in order to generate or receive application specific information 

30 using client side scripting, the CGI 1 503 or other raw interface must still be used. In the case of 
server side scripting, the server 1403 must parse the content as it is served, looking for a script to 
be interpreted. The access which a script has to the application is limited by the definition of the 
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scripting language, rather than by an application software interface designed by the application 
designer. 

A server side script is an executable program, or a set of commands stored in a file, that 
can be run by a server program to produce an HTML document that is then returned to the Web 
5 browser. Typical script actions include running library routines or other applications to get 
information from a file, a database or a device, or initiating a request to get information from 
another machine, or retrieving a document corresponding to a selected hypertext link. A script 
may be run on the Web server when, for example, the end user selects a particular hypertext link 
in the Web browser, or submits an HTML form request. Scripts are usually written in an 

10 interpreted language such as Basic, Practical Extraction and Report Language (Perl) or Tool 
Control Language (Tel) or one of the Unix operating system shell languages, but they also may 
be written in programming languages such as the "C" programming language and then compiled 
into an executable program. Programming in Tel is described in more detail in Tel and the Tk 
Toolkit , by John K. Ousterhout, Addison- Wesley, Reading, MA, USA, 1994. Perl is described 

15 in more detail in Pro gramming Perl , by Larry Wall and Randal L. Schwartz, O'Reilly & 
Associates, Inc., Sebastopol, CA, USA, 1992. 

Each document object in a web has an identifier called a Universal Resource Identifier 
(URI). These identifiers are described in more detail in T. Bemers-Lee, " Universal Resource 
Identifiers in World- Wide- Web; A Unifying Syntax for the Expression of Names and Addresses 

20 of Objects on the Network as used in the World-Wide Web ." RFC 1630, CERN, June 1994; and 
T. Bemers-Lee, L. Masinter, and M. McCahill, " Uniform Resource Locators OJRLV " RFC 1738, 
CERN, Xerox PARC, University of Minnesota, December 1994. A URI allows any object on 
the Internet to be referred to by name or address, such as in a link in an HTML document as 
shown above. There are two types of URIs: a Universal Resource Name (URN) and a Uniform 

25 Resource Locator (URL). A URN references an object by name within a given name space. The 
Internet community has not yet fully defined the syntax and usage of URNs. A URL references 
an object by defining an access algorithm using network protocols. An example URL is 
"http://www.agranat.conT A URL has the syntax "scheme: scheme_specific_components" where 
"scheme" identifies the access protocol (such as HTTP, FTP or GOPHER). For a 

30 scheme of HTTP, the URL may be of the form "http://host:port/path?search n 

where 

"host" is the Internet domain name of the machine that supports the protocol; 
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"port" is the transmission control protocol (TCP) port number of the appropriate 
server (if different from the default); 
"path" is a scheme-specific identification of the object; and 
"search" contains optional parameters for querying the content of the object. 
5 URLs are also used by web servers and browsers on private computer systems or networks and 
not just the World- Wide- Web. 

A site, i.e. an organization having a computer connected to a network, that wishes to 
make documents available to network users is called a "Web site" and must run a "Web server" 
program to provide access to the documents. A Web server program is a computer program that 
10 allows a computer on the network to make documents available to the rest of the World-Wide- 
Web or a private web. The documents are often hypertext documents in the HTML language, 
but may be other types of document objects as well, as well as images, audio and video 
information. The information that is managed by the Web server includes hypertext documents 
that are stored on the server or are dynamically generated by scripts on the Web server. Several 
1 5 Web server software packages exist, such as the Conseil Europeen pour la Recherche Nucleaire 
(CERN, the European Laboratory for Particle Physics) server or the National Center for 
Supercomputing Applications (NCSA) server. Web servers have been implemented for several 
different platforms, including the Sun Sparc 1 1 workstation running the Unix operating system, 
and personal computers with the Intel Pentium processor running the Microsoft® MS-DOS 
20 operating system and the Microsoft® Windows™ operating environment. 

Web servers also have a standard interface for running external programs, called the 
Common Gateway Interface (CGI). CGI is described in more detail in How To Set Up And 
Maintain A Web Site, by Lincoln D. Stein, Addison- Wesley, August 1995. A gateway is a 
program that handles incoming information requests and returns the appropriate document or 
25 generates a document dynamically. For example, a gateway might receive queries, look up the 
answer in an SQL database, and translate the response into a page of HTML so that the server 
can send the result to the client. A gateway program may be written in a language such as "C" or 
in a scripting language such as Perl or Tel or one of the Unix operating system shell languages. 
The CGI standard specifies how the script or application receives input and parameters, and 
30 specifies how any output should be formatted and returned to the server. 

A user (typically using a machine other than the machine used by the Web server) that 
wishes to access documents available on the network at a Web site must run a client program 
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called a "Web browser." The browser program allows the user to retrieve and display documents 
from Web servers. Some of the popular Web browser programs are: the Navigator browser from 
NetScape Communications Corp., of Mountain View, California; the Mosaic browser from the 
National Center for Supercomputing Applications (NCSA); the WinWeb browser, from 
Microelectronics and Computer Technology Corp. of Austin, Texas; and the Internet Explorer, 
from Microsoft Corporation of Redmond, Washington. Browsers exist for many platforms, 
including personal computers with the Intel Pentium processor running the Microsoft® MS-DOS 
operating system and the Microsoft® Windows™ environment, and Apple Macintosh personal 
computers. 

The Web server and the Web browser communicate using the Hypertext Transfer 
Protocol (HTTP) message protocol and the underlying transmission control protocol/internet 
protocol (TCP/IP) data transport protocol of the Internet. HTTP is described in Hypertext 
Transfer PfQtQCQl - HTTP/1 ,P, by T. Berners-Lee, R. T. Fielding, H. Frystyk Nielsen, Internet 
Draft Document, October 14, 1995, and is currently in the standardization process. At this 
writing, the latest version is found in RFC Z068 which is a draft definition of HTTP/1.1. In 
HTTP, the Web browser establishes a connection to a Web server and sends an HTTP request 
message to the server. In response to an HTTP request message, the Web server checks for 
authorization, performs any requested action and returns an HTTP response message containing 
an HTML document resulting from the requested action, or an error message. The returned 
HTML document may simply be a file stored on the Web server, or it may be created 
dynamically using a script called in response to the HTTP request message. For instance, to 
retrieve a document, a Web browser sends an HTTP request message to the indicated Web 
server, requesting a document by its URL. The Web server then retrieves the document and 
returns it in an HTTP response message to the Web browser. If the document has hypertext 
links, then the user may again select a link to request that a new document be retrieved and 
displayed. As another example, a user may fill in a form requesting a database search, the Web 
browser will send an HTTP request message to the Web server including the name of the 
database to be searched and the search parameters and the URL of the search script. The Web 
server calls a program or script, passing in the search parameters. The program examines the 
parameters and attempts to answer the query, perhaps by sending a query to a database interface. 
When the program receives the results of the query, it constructs an HTML document that is 
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returned to the Web server, which then sends it to the Web browser in an HTTP response 
message. 

Request messages in HTTP contain a "method name" indicating the type of action to be 
performed by the server, a URL indicating a target object (either document or script) on the Web 

5 server, and other control information. Response messages contain a status line, server 

information, and possible data content. The Multipurpose Internet Mail Extensions (MIME) are 
a standardized way for describing the content of messages that are passed over a network. HTTP 
request and response messages use MIME header lines to indicate the format of the message. 
MIME is described in more detail in MIME (Multipurpose Internet Mail ExtensionsV 

1 0 Mechanisms for Specify ing and Describing the Format of Internet Message Bodies, Internet RFC 
1341, June 1992. 

The request methods defined in the HTTP/1 . 1 protocol include GET, POST. PUT, 
HEAD, DELETE, LINK, and UNLINK. PUT, DELETE, LINK and UNLRnIK are less 
commonly used. The request methods expected to be defined in the final version of the 

1 5 HTTP/1 . 1 protocol include GET, POST, PUT, HEAD, DELETE, OPTIONS and TRACE. 
DELETE, PUT, OPTIONS and TRACE are expected to be less commonly used. All of the 
methods are described in more detail in the HTTP/1 .0 and HTTP/1 . 1 specifications cited above. 

Finally, a device or application using conventional World-Wide-Web technology must 
have access to a server. Conventional servers are large software packages which run on 

20 relatively large, resource-rich computer systems. These systems are resource-rich in terms of 
processing speed and power, long-term storage capacity, short-term storage capacity and 
operating system facilities. Conventional servers take advantage of these resources, for example, 
in how they store content source documents. For high-speed, convenient access to content, it is 
conventionally stored in a directory tree of bulky ASCII text files. Therefore, conventional 

25 World- Wide- Web technology cannot be used to implement a GUI in a relatively small, 
inexpensive, resource-poor device or application. 

The combination of the Web server and Web browser communicating using an HTTP 
protocol over a computer network is referred to herein as the World-Wide- Web communications 
paradigm. 
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SUMMARY OF THE INVENTION 

It is therefore an object of the present invention to provide an improved graphical user 
interface (GUI) for use in connection with remote control, management, configuration, 
monitoring and diagnosing functions embedded in applications, devices and equipment. 
5 According to one aspect of the invention, there is provided a method for providing a 

graphical user interface having dynamic elements. The method begins by defining elements of 
the graphical user interface in at least one text document written in a mark-up language. Next, 
the method defines including at a location in the document a code tag containing a segment of 
application source code. The text document is then served to a client which interprets the mark- 
10 up language; and when the location is encountered, the client is served a sequence of characters 
derived from a result of executing a sequence of instructions represented by the segment of 
application source code. An embodiment of code tags illustrating their use is described in detail, 
later. 

According to another aspect of the invention, there is another method for providing a 
1 5 graphical user interface having dynamic elements. This method also defines elements of the 
graphical user interface in at least one text document written in a mark-up language. Included in 
the document is a string identified by prototype tags. The text document is served to a 
prototyping client which interprets the mark-up language but does not recognize and does not 
display the prototype tag, but does display the string. An embodiment of prototype tags 
20 illustrating their use is described in detail, later. 

According to yet another aspect of the invention, there is yet another method for 
providing a graphical user interface having dynamic elements. Elements of the graphical user 
interface are defined in at least one text document written in a mark-up language. Included at a 
location in the document is a code tag containing a segment of application source code. Also 
25 included in the document is a string identified by prototype tags. The text document is compiled 

into a content source, which is subsequently decompiled into a replica of the text document. The 

* 

replica of the text document is served to a client which interprets the mark-up language; and 
when the location is encountered in the replica, the client is served a character stream generated 
by executing the segment of application source code. 
30 Yet another aspect of the invention is a software product recorded on a medium. The 

software product includes a mark-up language compiler which can compile a mark-up language 
document into a data structure in a native application programming language, the compiler 
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recognizing one or more code tags which designate included text as a segment of application 
source code to be saved in a file for compilation by a compiler of the native application 
programming language. 

Another aspect of the invention is a method for providing a graphical user interface 

5 having displayed forms for entry of data. The steps of this method include defining elements of 
the graphical user interface in at least one text document written in a mark-up language; naming 
in the document a data item requested of a user and used by an application written in a native 
application programming language; and compiling the text document into a content source 
including a data structure definition in the native application programming language for the 

10 named data item. 

Yet another aspect of the invention may be practiced in a computer-based apparatus for 
developing a graphical user interface for an application, the apparatus including an editor which 
can manipulate a document written in a mark-up language and a viewer which can display a 
document written in the mark-up language. The apparatus further includes a mark-up language 

15 compiler which recognizes a code tag containing a source code fragment in a native application 
source code language, the code tag not otherwise part of the mark-up language, the compiler 
producing as an output a representation in the native application source code language of the 
document, including a copy of the source code fragment. 

In accordance with another aspect of the invention, there is a method for developing and 

20 prototyping graphic user interfaces for an application. The method includes accessing an HTML 
file, encapsulating portions of said HTML and entering source code therein, producing a source 
module from said HTML with encapsulated portions, producing source code for a server, and 
cross compiling and linking said application, said source code module and said server thereby 
producing executable object code. 

25 The invention, according to another aspect thereof, may be a data structure fixed in a 

computer readable medium, the data structure for use in a computer system including a client and 
a server in communication with each other. The data structure includes cross-compiled, stored 
and linked, HTML files with encapsulated portions containing executable code associated with 
said application, server code, and application code, wherein said executable code is run when the 

30 HTML file is served thereby providing real time dynamic data associated with said application. 
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BRIEF DESCRIPTION OF T HE DRAWINGS 

In the drawings, in which like reference numerals denote like elements: 
Fig. 1 is a block diagram of that aspect of the invention relating to development systems; 
Fig. 2 is a block diagram of that aspect of the invention relating to an embedded system; 
5 Fig. 3 is an HTML text fragment illustrating the use of an EMWEB_STRING tag; 

Fig. 4 is another HTML text fragment illustrating another use of an EM WEB_STRING 

tag; 

Fig. 5 is an HTML text fragment illustrating the use of an EMWEBINCLUDE tag; 
Fig. 6 is another HTML text fragment illustrating another use of an EMWEB JNCLUDE 

10 tag; 

Fig. 7 is an HTML text fragment showing a use of the EMWEBITERATE attribute in 
connection with an EMWEB_STRING tag; 

Fig. 8 is an HTML text fragment showing a use of the EMWEBJTERATE attribute in 
connection with an EMWEBJNCLUDE tag; 
15 Fig. 9 is an example of forms processing showing the relationship between the HTML 

source code for the form and the form output produced; 

Fig. 10 is a block diagram of the data structure which defines the header for the data.dat 
archive file; 

Fig. 1 1 is a state diagram of an embedded system illustrating dynamic content processing; 
20 Fig. 12 is a state diagram of an embedded system illustrating forms processing; 

Fig. 13 is a state diagram of an embedded system illustrating suspend/resume processing; 

Fig. 14 is a block diagram illustrating conventional World- Wide- Web communication of 
static content between a server and a client; and 

Fig. 15 is a block diagram illustrating conventional World-Wide- Web communication of 
25 dynamic content between a server and a client. 

PETAJlrEP PESCRTf TION 

The present invention will be better understood upon reading the following detailed 
description in connection with the figures to which it refers. 
30 Embodiments of various aspects of the invention are now described. First, a development 

environment is described in which application development and graphical user interface 
development are closely linked, yet require a low level of complexity compared to conventional 
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development of an application and GUI. Second, an operating environment is described in which 
the application, a server and GUI are tightly coupled, compact and flexible. In the described 
system a GUI having portability, low run-time resource requirements and using any of a wide 
variety of systems available to a user as a universal front end, i.e. the point of contact with the 
5 user is software with which the user is already familiar. 

Development Envi ronment 

Fig. 1 illustrates a development environment according to one aspect of the invention. 
Not all components of the environment are shown, but those shown are identified in the 

l o following discussion. 

Conventionally, an application development environment may include a source code 
editor, a compiler 101, a linker and a run-time environment in which to test and debug the 
application. It is expected that development environments in accordance with the invention 
include those components of a conventional development environment which a developer may 

15 find useful for developing an application. In the case of embedded applications, i.e., applications 
included within a device or larger application, the run-time environment includes the device or 
application in which the application is embedded, or a simulation or emulation thereof. 

The compiler 101 takes source code 103 generated using the source code editor or from 
other sources and produces object code 105, which is later linked to form the executable image. 

20 In addition to the conventional elements noted above, the described embodiment of a 

development environment according to the invention includes an HTML compiler 107 whose 
output 109 is in the source code language of the application under development. In addition, the 
development environment may include an HTML editor, an HTTP-compatible server for 
communicating with client software, i.e., browsers, and an HTTP-compatible browser. 

25 The HTML editor is used to create and edit HTML documents 1 1 1 which define the look 

and feel of a GUI for the application. Numerous tools are now available for performing this task 
while requiring a minimal knowledge or no knowledge of HTML, for example, Microsoft® Front 
Page™. It is preferred that the HTML editor used permit entry of non-standard tags into the 
HTML document. 

30 As will be seen in further detail, below, the server and browser are used to test a 

prototype GUI before it is fiilly integrated with the application or in the absence of the 
application. The browser should be capable of making a connection with the server using, for 



WO 98/06033 PCT/US97/13817 

- 15- 

example, a conventional connection protocol such as TCP/IP, as shown and described above in 
connection with Fig. 14. Other protocols or direct connections can also be used, as would be 
understood by those skilled in this art. While the browser and the server may be connected 
through a network such as the Internet, they need not be. For example, the server and client may 
5 run and connect on a single computer system. 

Application development proceeds substantially in a conventional manner as known to 
software developers. The application development should include the design of a software 
interface through which data will be communicated into and out of the application. However, the 
software interface is not a GUI. Rather, the interface merely defines how other software can 

10 communicate with the application. For example, the interface may be a collection of function 
calls and global symbols which other software can use to communicate with the application. The 
application should be written in a high level language such as C, C++, etc. The application can 
be tested by compiling and linking it with prototype code that provides or receives information 
through the software interface, exercising those features of the application. 

15 Meanwhile, a GUI for the application is designed as follows. The look and feel of the 

GUI are developed using the HTML editor, server and browser to create a set of content source 
documents 1 1 1 including at least one HTML document, which together define the look and feel 
of the GUI. This aspect of GUI development is conventional, proceeding as though the 
developer were developing a World- Wide- Web site. 

20 At locations in one or more HTML documents where data obtained from the application 

is to be displayed, the author includes special tags, explained further below, which allow the 
HTML document to obtain from the application the required data, using the application software 
interface. 

The content source documents 1 1 1 are stored conventionally in the form of one or more 
25 directory trees 113. The directory tree 113 containing the content which defines the GUI is then 
compiled using the HTML compiler 107, to produce an application source code language output 
109 representing the content source documents in the directory tree. The source code elements 
109 produced from the content source documents 1 1 1 in the directory tree 113, source code for 
an HTTP compatible server (not shown) and the application source code 103 are compiled into 
30 object code 105 and linked to form an executable image. The server may be supplied in the form 
of an object code library, ready for linking into the finished executable image. The executable 
image thus formed fully integrates the graphical user interface defined using familiar tools of 
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World-Wide-Web content development with the control and other functions defined using 
conventional application development tools. 

In order to successfully perform the integration described above, the HTML compiler 107 
of the described embodiment of the invention, the EmWeb™/compiler 107, recognizes a number 

5 of special extensions to HTML. The HTML extensions implemented by the EmWeb™/compiler 
107, embodying aspects of the invention are described in detail in Table A, Section 32. Several 
of these extensions are described briefly here, to aid in understanding the invention. 

The EMWEB_STRING tag is an extension of HTML used to encapsulate a fragment of 
source code in the HTML document. The source code will be executed by a system in which the 

1 0 application is embedded when the document is served to a browser (usually running on another 
system) and the location of the EM WEB_STRING tag is reached. The source code returns a 
character string that is inserted as is into the document at the location of the EMWEB_STRING 
tag. Examples of the use of the EMWEB_STRING tag are shown in Figs. 3 and 4, 

In the example of Fig. 3, the EMWEB_STRING tag 301 first defines using H C=" a 

15 boundary character 303 used to define the end 305 of the included source code. Immediately 
following the boundary character definition is a fragment of C code 307 which returns a pointer 
to a string representing one of three fax states. When served by an embedded application, this 
example HTML produces the text "NetFax State:" followed by "Sending", "Receiving" or "Idle", 
depending on the value of the symbol GlobalFaxState. 

20 The example of Fig. 4 shows the use of EMWEBSTRING to output typed data whose 

type is defined by an attribute, EMWEB_TYPE 401 . The EmWeb™/compiler uses this attribute 
401 to produce a source code output routine which converts the typed data found at the address 
returned 403 into a string for serving at the proper location in the document. 

A similar function is performed by the HTML extension, the EMWEBJNCLUDE tag. 

25 Using this tag, standard parts of a GUI such as headers and footers common to multiple pages or 
windows of information need only be stored once. Header and footer files are referred to using 
the EM WEB_INCLUDE tag which inserts them at the location in each HTML content document 
where the tag is placed. In the described embodiment of the invention, the contents of the 
EMWEB JNCLUDE tag must resolve to a relative or absolute path name within the local 

30 directory tree of content. This can be done by specifying a local Universal Resource Locator 
(URL), which is how resources are located in the World-Wide- Web communications paradigm, 
or by including source code which returns a string representing such a local URL. An absolute 
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local URL takes the form "/path/filename", where l 7path" is the full path from the root of the 
directory tree to the directory in which the file is located. A relative URL defines the location of 
a file relative to the directory in which the current, i.e., base, document is located and takes the 
form "path/filename". While the described embodiment requires resolution of the 
5 EMWEB JNCLUDE tag to a local URL, the invention is not so limited. In alternate 
embodiments, local and external URLs may be permitted or other limitations imposed. 
Examples of the use of the EMWEB JNCLUDE tag are shown in Figs. 5 and 6. 

In the example of Fig. 5, a COMPONENT attribute 501 in an EMWEB JNCLUDE tag 
simply defines a local URL 503. 

10 In the more elaborate example of Fig. 6, a fragment of source code 601 which produces a 

local URL 603 upon a defined condition 605 is used to generate a local URL at run time. 

The results to be returned by an EMWEB_STRING or EMWEB_INCLUDE tag can also 
be built up iteratively using repeated calls to the included source code. This is done using the 
EMWEBJTERATE attribute, yet another extension to HTML. Examples of the use of 

15 EMWEBJTERATE are shown in Figs. 7 and 8. 

Fig. 7 shows an example of the EMWEBJTERATE attribute 701 used in connection 
with the EMWEBSTRING tag 703. The fragment of code 705 is executed repeatedly until a 
NULL is returned. Thus, this HTML repeatedly executes the C source code fragment to display 
the tray status of all trays in a system. 

20 Similarly, in Fig. 8, EMWEB JNCLUDE 801 and EMWEBJTERATE 803 are used to 

build a table of features for which content from other URLs 805 are to be displayed. When the 
table is complete, a NULL is returned 807, terminating the iterations. 

Since the extensions to HTML described above allow the encapsulation of source code 
within an HTML document a mechanism with which to provide the encapsulated source code 

25 with required global definitions, header files, external declarations, etc. is also provided in the 
form of an EMWEB JffiAD tag. The EMWEB JiEAD tag specifies a source code component 
to be inserted in the source code output of the EmWeb™/compiler, outside of any defined 
function. Although it is preferred that the EMWEB JffiAD tag appears in the HTML file 
header, it may appear anywhere. The code generated by an EMWEB JffiAD tag is placed before 

30 any functions or other code defined within the HTML content source documents. 

As indicated above, the GUI may be prototyped using a conventional server and browser 
(see Fig. 14) to preview the HTML documents comprising the GUI. Therefore, it may be useful 
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to provide static content with which to preview the page, at locations where dynamic content will 
appear during use, but which does not appear in the compiled document. For example, it may be 
useful to include a prototyping value for content which is otherwise provided using the 
EMWEB_STRING tag mechanism. Therefore, another extension to HTML recognized by the 
5 EmWeb™/compiler is the EM WEB_PROTO begin 309 and end 3 1 1 tags, as shown in Fig. 3. 
The EmWeb™/compiler removes these tags and everything between them when compiling the 
document, but the tags are ignored and the text between them is interpreted normally by a 
conventional browser viewing the HTML document either directly or via a conventional server. 
Conventional browsers recognize the tag due to its special syntax, e.g., being enclosed in and 

10 ">"\ but are designed to ignore and not display any tag for which the browser does not have a 
definition. All EmWeb™/compiler HTML extensions are thus skipped over by conventional 
browsers. Thus, in the example of Fig. 3, the prototype page displays "NetFax State: Sending". 
Fig. 4 shows a similar use of EMWEB_PROTO tags. 

Handling of HTML forms by the EmWeb™/compiler is now described in connection 

15 with Fig. 9. As seen in Fig. 9, an HTML form is defined substantially conventionally. Names 
used in the form are used in constructing symbol names used in the output source code produced 
by the EmWeb™/compiler. Therefore names should be valid symbol names in the source code 
language. 

Each element of a form definition is translated by the EmWeb™/compiler into a part of a 
20 corresponding data structure defined for that form. Forms data is moved into and out of the 
application by changing values of items in the data structure. 

Turning now to the example in Fig. 9, the relationship between the illustrated HTML 
form definition and the corresponding data structure is described. The form is given a unique 
name, using an EMWEB_NAME attribute in a FORM tag. The form name becomes part of the 
25 structure name, for easy reference and uniqueness. The form name will also be used to generate 
function names for functions which are called when the form is served and when the form is 
submitted. 

The structure generated is itself composed of two structures. The first holds values of 
each dynamic element of the form. The second holds a status flag indicating the status of the 
30 contents of a corresponding value. Thus, in the example of Fig. 9, a structure to hold values and 
status for the sysName INPUT and the Logging SELECTion is created. The value of sysName is 
a character string, while Logging is an enumerated type. 
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Two function prototypes are also generated. The actions to be performed by these 
functions must be defined by the developer. The Serve function is called when the form is 
served and can be used to supply default values, for example. The Submit function is called 
when the form is submitted, to update values in the data structure, for example. 

5 Currently, EmWeb™/compiler supports TEXT, PASSWORD, CHECKBOX, RADIO, 

IMAGE, HIDDEN, SUBMIT, RESET, SELECT and OPTION input fields. For detailed 
descriptions, see Table A, Section 3.2.5. In addition, the EmWeb™/compiler supports "typing" 
of TEXT input field data. That is, the EMWEB_TYPE attribute may be used to define a TEXT 
input field to contain various kinds of integers, a dotted IP address (i.e., an address of the form 

10 000.000.000.000), various other address formats, etc. A mapping of EMWEBJTYPE values to 
C language types is formed in the table in Table A, Section 3.2.5.3. 

The EmWeb™/compiler has been described in terms of a generic application source code 
language. The current commercial embodiment of the Em Web™/compiler assumes the 
application source code language to be C or a superset thereof, e.g., C++. However, the 

15 functionality described can be generalized to any application source code language which may be 
preferred for a particular application purpose. However, in order to more fully understand how 
the EmWeb™/compiler and HTML extensions described above cooperate to permit integration 
of an HTML defined GUI with an application defined in an application source code, it will be 
assumed, without loss of generality, that the application source code language is C or a superset 

20 thereof. 

The EmWeb™/compiler produces a set of output files including a data.dat file containing 
the fixed data of a content archive, a codex file containing the generated source code portions of 
an archive including portions defined in EMWEBSTRING, EMWEBJNCLUDE and 
EMWEB_HEAD tags and other source code generated by the EmWeb™/compiler, as well as 
25 proto.h and stubs.c files containing the definitions of C functions used for forms processing. The 
structure of these files is now described in connection with the data structure illustrated in Fig. 
10. 

The content archive file datadat has a header structure as illustrated in Fig. 1 0. The data 
structure is accessed through an archive header 1001 which is a table of offsets or pointers to 
30 other parts of the archive. For example, there is a pointer 1001a to a compression dictionary 
1003 for archives which include compressed documents. There is also a pointer 1001b to a 
linked list of document headers 1005, 1007 and 1009. Each document header 1005, 1007 and 
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1 009 is a table of offsets or pointers to various components of the document. For example, the 
document header includes a pointer 1005a to the URL 101 1 to which the document corresponds. 
There is also a pointer 1005b to a field 1013 giving the Multipurpose Internet Mail Extension 
(MIME) type of the document. There are pointers 1005c and 1005d respectively to header nodes 
5 1015 and document nodes 1017, explained further below. Finally, there is a pointer 1 005e to a 
block of static compressed or uncompressed data 1019 representing the static portions of the 
document. 

The static data does not include any EmWeb™ tags, i.e., the extensions to HTML 
discussed above and defined in detail in Table A. Rather, information concerning any Em Web™ 

10 tags used in the document appears in the document nodes structure. 

Each Em Web™ tag employed in a document is represented in that document's document 
nodes structure as follows. The location of the Em Web™ tag within an uncompressed data 
block or an uncompressed copy of a compressed data block is represented by an offset 1 017a 
relative to the uncompressed data. The type of tag is indicated by a type flag 1017b. A node 

15 may include a flag which indicates any attributes associated with the tag represented. For 

example, a node for a tag of type EMWEB_STRING may include a flag indicating the attribute 
EMWEB JTERATE. Finally, nodes include an index 1017c. In nodes defining form elements, 
the index holds a form number and element number uniquely identifying the element and form 
within the document. In nodes defining EMWEB_STRING tags, the index is a reference to the 

20 instance of source code which should be executed at that point. As such, the index may be 
evaluated in an expression of a "switch" statement in C, where each controlled statement of the 
"switch" statement is one source code fragment from one EMWEB_STRING instance. 
Alternatively, the index may be a pointer or index into a table of source code fragments from 
EMWEB_STRING tags, which have been encapsulated as private fimctions. 

25 The data structure defined above provides a convenient way of transferring control as a 

document containing dynamic content is served. When a document is requested, the list of 
document nodes is obtained, to determine at what points control must be transferred to code 
segments which had been defined in the HTML source document. The document is then served 
using the data block defining the static elements of the document, until each document node is 

30 encountered. When each document node is encountered, control is transferred to the appropriate 
code segment. After the code segment completes execution, the static content which follows is 
served until the offset of the next document node is encountered. 
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Header nodes permit the storage of document meta information, not otherwise handled, 
such as content language, e.g., English, German, etc., cookie control, cache control or an e-tag 
giving a unique version number for a document, for example a 30-bit CRC value computed for 
the document. By avoiding having to put this information in the header of each document, 
5 significant space can be saved in the archive because not all documents require this information. 
Therefore, header nodes need only be stored for documents using this information. 

The data structure which represents the archive of content used by the 
EmWeb™/compiler embodiment of the invention is defined by the C source code contained in 
Table B. 

10 

Run-time Environment 

Aspects of the invention related to the run-time environment and server are embodied in 
the EmWeb™/server as described in detail in Table A, Section 4. 

To a conventional browser implementing HTTP, the EmWeb™/server behaves 
15 conventionally. However, as shown in Fig. 2, the EmWeb™/server is fully integrated with the 
application and therefore has access to information about the application and device in which it is 
embedded. 

Operation of the EmWeb™/server with respect to presentation of dynamic content is now 
described in connection with Fig. 1 1 . 

20 Before the operations shown in Fig. 1 1 commence, one or more archives are loaded by 

the server. When each archive is loaded, the server generates a hash table using the archive 
header data structure to make documents easy to locate using URLs. 

First, the browser requests a document at a specified URL, using HTTP 1101. The 
EmWeb™/server acknowledges the request, in the conventional manner 1 103. The 

25 EmWeb™/server then uses the hash table of the archive header to locate the document requested 
and begin serving static data from the document 1 105. When a document node is encountered, 
for example denoting the presence of an EMWEB_STRING tag, then the server passes control to 
the code fragment 1 107a of the application which had been included in the EMWEB_STRING 
tag 1 107. When the code fragment completes execution and returns some dynamic data 1 109, 

30 the Em Web™/server then serves that dynamic data to the browser 1111. The EmWeb™/server 
then resumes serving any static data remaining in the document 1113. This process continues 
until the entire document, including all dynamic elements has been served. 
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Run-time serving and submission of forms is now described in connection with Fig. 12. 
A brief inspection of Fig. 12 will show that form service and submission proceeds along similar 
lines to those for serving dynamic content. 

The browser first requests a URL using HTTP 1201. When, during service of the 

5 contents of the URL requested, a form is encountered, service of the form and any HTML- 
defined default values commences normally. The EmWeb™/server then makes a call to the 
application code 1203 to run a function 1203a which may substitute alternate default values 1205 
with which to fill in the form. The document served then is made to include the default values 
defined by the static HTML as modified by the application software 1207. Later, when the user 

10 submits the form, the browser performs a POST to the URL using HTTP 1209. The form data is 
returned to the application by a call 1211 made by the EmWeb™/server to a function 1211 which 
inserts the data returned in the form into the data structure defined therefor within the application 
code. The response 1213 is then served back to the browser 1215. 

Finally, it should be noted that there may be times when a request for dynamic content 

15 may require extended processing, unacceptably holding up or slowing down other operations 
performed by the application. In order to avoid such problems, the EmWeb™/server implements 
a suspend/resume protocol, as follows. The suspend/resume protocol exists within a context of a 
scheduler maintained and operated by the server. The scheduler includes a task list of scheduled 
server tasks to be performed. 

20 Fig. 1 3 illustrates a situation where a browser requests a document containing an 

EMWEB_STRING tag whose processing is expected to interfere with other application 
operations. The initial HTTP request 1301 for the document is acknowledged 1303, 
conventionally. When the EMWEB_STRING tag is encountered, control transfers 1305a to the 
appropriate source code fragment 1305b in the application. The application then calls the 

25 suspend function 1 307 of the EmWeb™/server and returns a dummy value 1 309 to the function 
call generated at the EMWEB_STRING tag location. Calling the suspend function 1307 causes 
the scheduler to remove the EMWEB_STRING processing task from the task list. When the 
application has finally prepared the dynamic content required in the original function call, the 
application calls a resume function 131 1 of the EmWeb™/server. Calling the resume function 

30 1311 requeues the EM WEB-STRING processing task on the task list, as the current task. The 
EmWeb™/server responds by calling 1 305c the function 1305d defined at the 
EMWEB_STRING tag again, this time immediately receiving a response from the application in 
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or more automatic software text filters. Therefore, it is intended that the scope of the present 
invention be limited only by the properly construed scope of the claims appended hereto. 
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which the requested dynamic content 1313 is returned. The dynamic content is then served to 
the browser 1315. 

The suspend/resume feature is particularly useftil in distributed processing environments. 
If an embedded application is running on one processor of a distributed environment, but 
5 dynamic content can be requested which is obtained only from another processor or device in the 
distributed environment, then the use of suspend/resume can avoid lockups or degraded 
processing due to the need to obtain the dynamic content through a communication path of the 
distributed environment. Consider, for example, a distributed system including a control or 
management processor, and several communication devices. An embedded application running 
10 on the management processor can be queried for configuration data of any of the communication 
devices. Without suspend/resume, obtaining that data would tie up the communication path used 
by the management processor for control of the various communication devices, degrading 
performance. 

The described embodiment of the invention illustrates several advantages thereof. For 

15 example, an embedded application can now have a GUI which is independent of either the 
application platform of that used to view the GUI. For example, the GUI can be operated 
through a Microsoft® Windows™ CE machine, Windows™ 3.x machine, Apple Macintosh, 
WebTV box, etc. running conventional browser software. Also, development of a GUI for an 
embedded application is greatly simplified. The look and feel is designed using conventional 

20 HTML design techniques, including straight-forward prototyping of the look and feel using a 
conventional client server system, using simple HTML extensions. Integration with the 
embedded application does not require the developer to learn or develop any special interface, 
but rather uses some HTML extensions to incorporate application source code directly into the 
HTML content. Yet another advantage in that the entire embedded application along with an 

25 HTTP-compatible server and the content to be served is reduced to a minimum of application 
source code, data structures for static data and data structures for dynamic data. 

The present invention has now been described in connection with specific embodiments 
thereof. However, numerous modifications which are contemplated as falling within the scope 
of the present invention should now be apparent to those skilled in the art. For example, the 

30 invention is not limited to content whose source is HTML. Any mark up language could be used 
in the context of this invention. Alternatively, the content source could be raw text, which is 
particularly suitable for situations where the output of the user interface is also processed by one 
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1. Introduction 

The explosive growth of the World-Wide-Web in recent years has created a new standard 
lor the Graphical User Interface (GUI) of networked applications: the Web browser. 
Netscape®, Mosaic, and other commercial and public-domain Web browsers are 
ubiquitous and inexpensive. 



1.1. Web-based Network Management 

Network management is a natural application for the World-Wide-Web. Before the Web, 
network management required end-users to purchase expensive custom-built GUI 
applications that used the SNMP protocol to manage network-based devices. With 
World-Wide-Web technology, many of these applications can be replaced by 
economical Web browsers. 

World-Wide-Web standards make it possible to migrate the "look-and-feel" intelligence 
of the device configuration GUI away from third-party and custom-built network 
management applications and into the managed device itself. This migration gives 
vendors control over the configuration "look-and-feef" of their products among both low- 
cost Web browsers and the high-end third-party network management applications of 
the future. 

Web-based network management can greatly accelerate the time-to-market for 
products traditionally managed by SNMP. With SNMP-based management, new 
product features require significant engineering resources to design and implement 
proprietary MIBs and develop customized GUI applications to manage the new features. 
On the other hand, Web-based management GUI applications can be rapidly prototyped 
and implemented using simple HTML forms. 

SNMP will continue to play an important role in high-end network management 
applications by utilizing standard MIBs to monitor the overall topology and health of 
devices throughout the enterprise network. However, the new World-Wide-Web 
standards offer an exciting alternative to SNMP for the configuration and management 
of individual devices. 



1.2. Web-based Systems, Devices, and Software 

Embedded Web server technology can enable remote configuration, monitoring, and 
diagnostic capabilities for a wide range of applications. Imagine sending and receiving 
faxes, checking your voice-mall, and knowing the availability of your favorite candy bar 
in the vending machine down the hall by using your Web browser? Your office manager 
could configure the phone switch and voice-mail system, check the toner and paper 
levels in the photocopying machine, and monitor the security alarm system from their 
desktop. Your automobile mechanic could connect to your car's computer to perform 
engine diagnostics, and If they were stumped, the manufacturer could examine the 
results from around the world over the Internet. 
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1.3. G als 

EmWeb™ by Agranat Systems is a family of Embedded World-Wide-Web protocol 
software products engineered for the demanding real-time requirements of embedded 
systems. 

Goals of the EmWeb product architecture include: 

- Ease of use 

. Support rapid prototyping and implementation of new World Wide Web interfaces 
including device monitoring, configuration, and network management. 

. Easily portable to a wide-variety of real-time embedded operating environments 
with limited operating system capabilities, memory, and CPU resources. 

. Easily upgradable with new releases as World-Wide-Web standards continue to 
evolve rapidly. 

- High performance 

. Efficient implementation for real-time processing environments. 
. Small foot-print to minimize FLASH and RAM resources required. 

- Security 

. Support for authentication and security standards as they continue to evolve. 
. Configuration of method-independent access controls. 



1A Assumptions 

This functional specification assumes that the reader is familiar with the C programming 
language, the World-Wide-Web, and standards such as HTML (Hyper-Text Markup 
Language). Knowledge of HTTP (Hyper-Text Transport Protocol) and CGI (Common 
Gateway interface) is also helpful to understand some of the more advanced features, 
but isn't required for most applications. 
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2. Overview 

One draw-back to traditional World-Wide-Web servers is the CGI interface. Although 
HTML provides a convenient mechanism for sending interactive forms to a Web browser 
complete with text fields, checkboxes, and pull-down menus, the CGI interface used by 
server applications to process submitted forms is difficult to master. Form processing is 
essential for network management applications because it is the best way to Implement a 
device configuration screen using World Wide Web protocols. However, CGI is not an 
appropriate interface for the rapid implementation and prototyping of new network 
management capabilities (EmWeb's number one goal). Another draw-back to traditional 
World-Wide-Web servers Is the static nature of the content of files served to the Web 
browser. These files are typically resident on disk and are not expected to change 
frequently. On the other hand, the data of interest to network management applications is 
constantly changing (e.g. the number of packets received on a particular Ethernet port). 

The EmWeb architecture works around the draw-backs of traditional World-Wide-Web 
servers by extending the standard HTML specification with new proprietary tags 
developed by Agranat Systems. These tags make it possible to provide a more intuitive 
HTML form processing interface for embedded systems, and give the application run-time 
control over the document content for the presentation of dynamic data. Note that these 
tags are not actually sent to the Web browser. Instead, they are stripped out and 
interpreted by the Em Web/Compiler. 

The EmWeb product consists of two components: The EmWeb/Compiler and the 
EmWeb/Server. 

The EmWeb/Compiler is a tool provided by Agranat Systems that runs on an engineering 
development work-station under Unix, Windows/NT (x86), and Windows/95. The tool 
compiles one or more directories of files containing HTML, Java, text, graphics, etc., into 
one or more EmWeb archives. Each archive consists of an object code component and a 
fixed data component. These components are usually linked into the target's run-time 
image at compile time. However, the EmWeb architecture permits the dynamic loading 
and unloading of the fixed data components at run-time. Furthermore, if the target's 
operating system supports the dynamic loading and linking of object code modules, then 
entire archives may be loaded and unloaded at run-time. 

The Em Web/Server Is a portable run-time library implemented in ANSI C which is 
compiled and linked with the target platform's application software. The EmWeb/Server 
implements the HTTP protocols to handle requests from Web browsers and interfaces 
with the archives created by the EmWeb/Compiler. The EmWeb/Server implements an 
application interface (API) to the target software environment's memory management 
buffer management, and TCP/IP protocol stack. 
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3. EmWeb/Compiler 

The EmWeb/Compiler processes directories of HTML and other Web documents to 
generate ANSI C code. The generated C code Is then compiled using a C cross-compiler 
to generate object code for the target system. HTML forms are translated by the EmWeb/ 
Compiler into a simple C function call interface customized to the application. The 
software developer is responsible for implementing the application-specific C code using 
these simple interfaces. The EmWeb/Compiler can generate function prototype 
definitions (a C Include header file) to ensure correctness, and optionally generates stub 
functions to accelerate development 

The figure below illustrates the operation of the EmWeb/Compiler. 
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3.1. EmWeb Context 

The Em Web/Server maintains a handle of type Evscontext at run-time that corresponds 
to a specific HTTP request from a Web browser client. This handle is made available to 
the application code responsible for providing the run-time content of HTML documents 
and forms. 

The ErnWeb/Server contains a library of functions available to the application for 
extracting information attached to this handle. For example, the application may want to 
determine the type of browser making a request, and change the look-and-feel of the 
requested document to take advantage of features available to particular browsers. In 
this example, the application could extract the browser type as follows: 

bytes - evsContextUsezAgent (evscontext, 

usei_ agent, si zeof (*usei_ agent) ) ; 

For more information about available context information functions, refer to 4.1.5. 
Request Context Access, page 48. 

3.2. HTML Extensions 

The content to be provided by the EmWeb server is prepared as you would content for 
any normal Web server. The developer constructs a directory tree (or trees) of 
documents, which may include HTML documents, Java, text, graphics, and sound 
samples. The EmWeb compiler is then run over the content directory tree to build an 
internal database that is compiled and linked with the ErnWeb/Server and the system 
code. 

EmWeb defines proprietary HTML tags and attributes lor access to system data and 
dynamic system control of the served documents. These tags are never served to 
browsers by the ErnWeb/Server, and because (with one exception) they have no body 
part (they do not use a start and end tag, but only a stand-alone tag with attributes), they 
are ignored by browsers that see them when browsing the content tree either locally or 
via a non-EmWeb server. This facilitates testing and prototyping of content. 

3.2.1. EMWEB.STRING 

The <emweb_string> tag Is used to provide applications with run-time control of an 
HTML document's content by encapsulating a fragment of C code in the document 
itself. This C code is executed as the document is being served to a Web browser and 
returns a null-terminated character string that is inserted as-is into the document in 
place of the <emweb_string> tag. 

To include content in a document (which may include any standard HTML): 

<EMWEB_STRING c-'...; return (char *) aotnestzing; ' > 

or 

<EMWEB_STRING EMWEBJCTERATE C-'..,; return (char •) sornestring; ' > 
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The EmWeb/Compiler extracts the C language code fragment from the emweb_string 
tags in an HTML document and constructs a C module from them. Each fragment must 
end with a return statement that returns a pointer to a null-terminated string (or a null 
value which inserts no content). When the location of the emweb_string tag in the 
content is reached, the EmWeb/Server executes the code fragment and inserts the 
returned string into the document If the optional emweb_xterate attribute is specified, 
the code fragment is called repeatedly until it returns a null pointer value. The number 
of iterations already processed (beginning with zero) is available to the code fragment 
by calling: 

evsContextlterations (evsContext) ; 

Note that the local variable 

EwsContext evsContext; 

is made available to the emweb_strinc C code fragment by the EmWeb/Compiler. 

The returned string must not be an automatic (stack) variable. The value is copied for 
transmission by EmWeb/Server immediately after returning. Thus, a single static 
string buffer may be shared by multiple code fragments. If pre-emptive multi-threading 
is to be used, the application may maintain a per-request buffer as part of its network 
handle. Alternatively, emweb_iterate may be used to support dynamic allocation of the 
string buffer as follows. On the first iteration (#0), memory may be allocated, filled with 
data, and returned to the EmWeb/Server for transmission. On the second iteration 
(#1), memory may be released and a null pointer returned to terminate the iteration. 

The EmWeb/Compiler treats the embedded code opaquely; from the compiler's point 
of view, the code is simply a string of text that gets assembled into a generated code 
file. (See 3.6. Compiler Output, page 25). 

As such, the EmWeb/Compiler needs to know the beginning and end of the embedded 
C code fragment. The character following the o attribute in the emweb strikg tag 
Identifies the "bounds" of the embedded C code. This character musf be either a 
single quote Q or double quote (")• When the EmWeb/Compiler identifies this 
"boundary character", It then treats all following characters as part of the embedded C 
code fragment, until It finds the next terminating "boundary character". 

The obvious problem here Is that the embedded C code can contain a single or double 
quote as part of the C code. For example: 

return "Example of EmWeb's dynamic content\n w ; 

In order to keep the EmWeb compiler from mistakenly confusing a single or double 
quote that belongs to the C code fragment as the ending 'boundary character, the 
programmer must escape (using T) any character intended for the C code that would 
be confused with the terminating boundary character. Thus, the above code fragment 
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could be embedded in an emweb_string tag in either of the following ways: 

<EMWEB_STRING C-' return "Example of EmWeb V s dynamic content\n"; ' > 
<EHWEB_STRIKG C- M return \"Example of EmWeb* s dynamic content\n\ M ; -> 

The < emwe b_string > tag may optionally be typed using the emwebjtype attribute as 
follows: 

<EMWEB_STRING EMWEBJTYPE -DECIMAL_UINT C-' 

return (uint32 *) &some_integer ; ' > 

If emwebjtype is specified, then the C code fragment must return a pointer to data with 
the corresponding type. EmWeb/Server will convert the value into a character string 
automatically. A table of supported types can be found in section 3.2.5.3. HTML Form 
TEXT Input Fields, page 13 

3.2.2. EMWEB JNCLUDE 

The EmWeb/Server provides server-side inclusion of any part of its content tree using 
the emweb_include tag; it is used in the same way as the emweb_string tag: 

<EMWEB_INCLUDE COMPONENT ■ ' Loca 1 - URL ' > 

or " 

<EMWEB_INCLUDE C"'...; return (char *) localURL; ' > 

or 

<EMWEB_INCLUDE EMWEB_IT£RAT£ C»'...; return (char ♦) localURL; '> 

If the component tag is specified, the specified local element is resolved and inserted 
into the current document. This allows standard parts such as headers and footers to 
be stored only once. 

As in emweb_string, the fragment specified by the c- attribute must end with a return 
statement that returns a pointer to a null-terminated string (or null). For 
emwebjcnclude, however, this string is treated as a relative or absolute path name 
within the local content tree. The path name is resolved to an entire document, which 
is then inserted in the current document for return to the browser. If the optional 
emweb_iterate attribute is specified, the code fragment is called repeatedly until It 
returns a null pointer value. The number of iterations already processed (beginning 
with zero) is available to the code fragment using the same access routine used for 
emweb_string. This tag is useful for building a response from components that may 
be pari of the original document tree, or created dynamically. 

Note that the local variable 

Ews Con text evsContext; 

is made available to the emweb_xnclude C code fragment by the Em Web/Compiler. 
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The same quoting rules as emwebjstrinc apply to emweb_include. 

3.2.3. EMWEB.HEAD 

Because the <emweb_string> and <emweb_include> tags allow the application to 
encapsulate fragments of C code within an HTML document, a mechanism is needed 
to provide the code fragments with the necessary global definitions, header files, 
external declarations, etc. needed for compilation. The <emweb_head> tag is provided 
for this purpose. 

<EMWEB_HEAD C='#include file-name. h' > 

The emweb_head tag, if present, should appear in the head portion of the HTML 
document (this is not enforced, but the code fragments from all emweb_head fragments 
are placed at the beginning of the generated module, so doing so is less confusing);* it 
specifies a source fragment to be inserted in the generated module outside any C 
function. This fragment may declare variables, constants, or (as shown in the example 
above) C preprocessor directives - it could even define entire subroutines. This 
fragment is never executed directly by the EmWeb Server, so it does not insert any 
content into the document at the location of the tag. 

Note that all emweb_head code fragments from all HTML files in an archive are 
combined into the generated archive object code component source file. Therefore, it 
is recommended that common ^include directives appear only in one document in the 
archive (typically, the index.html document at the archive's root directory). 

The same quoting rules as emweb_strinc apply to emkeb_head. 

3.2.4. EMWEB_PROTO 

When designing an HTML document, it may occasionally be useful to provide content 
with which to preview the page, but which does not appear in the compiled document. 
This is accomplished with the ehwebproto begin and end tag; the EmWeb/Compiler 
removes these tags and everything between them when producing the document 
database, but the text between them Is interpreted normally by a browser viewing the 
HTML document directly or via a conventional server. For example: 

<H4> 

System: <EMWEB_ STRING 0 M xetuxn mib2sysName; -> 
<EMWEB~FROTO> system • name < /EMWEB_PROTO> 
C/H4> " " 

When compiled, the system name displayed in the first level header will be the value 
in the string variable mib2sysName, but viewed witb a browser when previewing it looks 
like: 

System: system-name 

Note that the EmWeb/Compiler Ignores HTML comments (e.g. "< < . - ... ..>"). If 
emweb_string and emweb_include tags are present within HTML comments, they will 
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be expanded by EmWeb/Server. If it is. desirable to "comment out" an emweb_string 
or emweb__include tag, emwebjproto tags should be used instead. 

3.2.5. Forms 

Form processing takes place as two operations; serving the form to the browser, 
possibly with current or default values set in some form input elements, and 
processing the values from the submitted form. Each of these operations is assisted 
by an application-provided routine associated with the form. Prototypes for these two 
application routines are produced for each form by the EmWeb/Compiler using 
information provided by EmWeb attributes on the FORM and its input elements. 

Restriction; While HTML allows it, EmWeb does not support 
nested form tags (you may not have a form within a form). 

The elements for each form are combined in a generated C data structure by the 
EmWeb Compiler; this structure is passed by the EmWeb Server to each of the two 
form processing routines, and includes information on the status of each element. 

3.2.5.1. Form Element Names 

The emwebh&ke attribute is used to specify the names to be used by the EmWeb/ 
Compiler when generating function and structure names. 

On the form tag, the emwebname attribute specifies a base name to be used to 
generate the function names and the form data structure name. (This implies that the 
value of the emwebname attribute must be a valid C identifier). Note that if emweb name 
is not present in a <form> tag, then the form is simply ignored by the EmWeb/ 
Compiler and is passed as-is to the browser. 

Consider the following example. Suppose there exists an HTML document 
•example.htmP that contains: 

<FORM METHOD" POST EMWEB^ NAME ■ foo ACTION *bai > 

The action attribute is optional; if action is not specified, then there may be only one 
form in the document. If action is specified, it is served to the browser as 
"AcrioN-exampie. html/bar". (This allows EmWeb/Server to differentiate between 
multiple forms in a document. It also allows the submission of forms to be protected 
by different access controls than the serving of forms. See 3.4. ACCESS Files, 
page 22). 

The EmWeb/Compiler generates the following function and structure prototypes: 

typedef stiucc EwaFozm foo s 
{ " ~ 

struct 
{ 

} value; 
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struct 
£ 

) status; 
} EvaFoxm_/oo; ... 

void evaForxnServe_f oo (EwsContext context, EvaFoxzn_/oo *foxmp); 
char * evaFormSubmit^foo (EwsContext context, EwaFoxrn_/oo *foxmp); 

The ellipsis (...) above are replaced by declarations of the structure members to hold 
the data for each form element The standard HTML name attribute is used in each 
input tag of the form to specify the structure member names within the form data 
structure. 

Restriction: While HTML allows arbitrary string values fornAME 
attributes, EmWeb requires that name attributes are valid C 
identifiers since they are used as field names in the form's C 
structure definition. 

The application-provided evaFoxmserve_/oo function is invoked by EmWeb/Server 
when the HTML document containing the form is requested by a Web browser. This 
provides the application with an opportunity to modify the default values displayed 
by the browser at run-time. 

The application-provided evaFoxmsubmit_/oo function is invoked by EmWeb/Server 
when the corresponding HTML form is submitted. This provides the application with 
an opportunity to process the submitted form data and generate an appropriate 
response. 

3.2.5.2. Form Data Structure 

The generated form data structure passes information for the form between the 
system and the EmWeb/Server. It has two sections: Value 1 and 'status', each 
containing one or more members for each form element. The 'status' section 
member is a flag that indicates the status of the contents of the Value 1 member. The 
Value' member contains the data for the form element in an internal representation 
which may be specified by the form author using the emweb_type attribute. For 
example: 

<INPUT TYPE-TEXT SIZE -15 MAXSIZE-15 VALUE- 127 .0.0.1 
NAME -ifAddr EMWEB JTYPE -DOTTED_I P> 

The example above produces the following structure members: 

typedef struct EvaForm_foo s 
{ 

struct 
{ 

uint32 ifAddz; 
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uintf 
uintf 



i£Addr_size; 
i£Addr_maxiength; 



} value; 
struct 



uint8 



ifAddr; 



} status; 
) EvaForm_foo; 

The value. ifAddr member contains the host-order 32-bit IP address. The 
evaFormserve_foo function sets this structure member with the value to be displayed 
on the form and sets status. ifAddr to ew_form_inttiali2ed1 (Note that if 
status . ifAddr is not changed by the application, thenlhe form is displayed with the 
value specified by the value tag, "127 . 0 . 0 . 1"). When the Web browser end-user has 
entered a valid IP address and submits the form, the Em Web/Server sets 
value. if Addi to the value provided by the browser and sets status. ifAddr to 

EW_FORM_RETURNED before invoking evaFormSubmit_foo. 

The value. if Addi_size member is generated because the size attribute was 
specified and defaults to 15. This gives evaFormserve_/oo an opportunity to override 
the field size value before serving the form. (This field is not used by 
evaFoxmSubmi t_ f 00). 

The value. ifAddrjnaxiength member is generated because the maxsize attribute 
was specified and defaults to 15. This gives ewaFormserve_/oo an opportunity to 
override the maximum field size value at run-time. (This field is not used by 

evaFormSubmi t_f 00). 

The status. ifAddr member is used to indicate the status of the form element 
member and consists of a bit field defined as follows (from src/inciude/ews_def . h): 



* For evaFormServe * 
•/ 

#define EW_FORM_INITIALIZED 0x01 /* set if field initialized */ 
#define EW~FORMJ>YNAKTC 0x02 /* set if field evaAlloc'ed */ 



For the evaFormserve_* call (when the form is being sent to the browser), the 
structure is passed with the status for each element set to either zero, or 
ew_form_initialized If a default value was specified by the HTML vaule tag. When 



* For ewaForxnSubmi t_* 



#define EW_FORM_RETURNED 0x10 
tfdefine EW~FORM_FARSE_ERROR 0x20 
^define EW~FORM~FILE ERROR 0x20 



/* set if value returned */ 
/• set if value invalid •/ 
/* or i/o error */ 
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control is returned to the EmWeb/Server, the server checks each status and uses 
the new value for each field for which the ew_form_initialized is set Initialized 
values override any value, checked, or selected values specified in the source 
HTML document The ew_porm_dynamic fiag is only valid for type fields containing 
pointers to data (including text, password, hidden, textarea, submit, and 
ehwebjiype^hexsttong) and indicates that the memory referenced by the pointer 
was allocated by evaAiioc and must be freed by EmWeb/Server using evanee after 
the form is served. 

When the form is submitted by the browser, the server attempts to convert each 
value returned by the browser to the appropriate type. The server sets the status 
member to indicate the status of the data member of the structure, and then calls the 
evaFormsubmit_* routine associated with the form. The ew_form_returned flag is set 
if a valid value was returned for the field in the submission. The 
ew_form_parse_error flag is set if a value was returned, but was not parsed conrectiy 
for the specified emweb_tope. 

Note: When a form is submitted, the contents of a value field is 
undefined unless the ew^form^returned fiag is set in the 
corresponding status byte. 

The application processes the submitted values and returns a string containing the 
URL to use as the redirection response to the Web browser, or hull for an empty 
("204 No Content") response. Alternatively, the following function may be invoked to 
return a local relative URL from the archive as a response. 

EwsStatus evsContextSeadReply C Evscontext context, char * url ) ; 

3.2.5.3. HTML Form TEXT Input Fields 

A text field can be used to represent a wide variety of value types. For example, a 
text field may be used to configure an IP address in which case the natural C- 
language representation Is a host-order 32-bit integer. By default, a text field is 
simply a null-terminated character string. However, the emwebjtype attribute may be 
used to Indicate any of a number of supported EmWeb types. Refer to the table 
below for details. 

HTML text fields may specify a field size and/or a maximum length. If so, additional 
_size and_maxiength structure members are added to the form structure to give the 
application /un-tlme control over these values. The format and resulting form 
structure fields of a text Input field is given below. 

<INPUT TYPE-TEXT HAME-jjame {MAXLENGTH«#max) {SIZE«ffsize) {VALUE-valuel 
{EMWEBJTYPE-wtppe) > 

EwTVpe name; /* defaults to value */ 

uintf namejnaxlength; /* defaults to #max •/ 
uintf name_si2e; /* defaults to #size */ 
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The following table lists all emwebjtoe values currently supported. 



EMWEBJTYPE 


C-Type 


Description 


(not specified) 


char * 


null-terminated string 


DECIMAL_IMT 


int32 


32-bit signed integer 


DECIMAL_UINT 


uint32 


32-bit unsigned integer 


HEX_INT 


uint32 


32-bit unsigned hex integer 


DOTTED^IP 


uint32 


32-bit host-order IP address translated using 
the conventional dotted-quad ASCII notation. 


IEEE_MAC 


char [6] 


IEEE MAC address (any of ':' or '-' or " is 
accepted between bytes on input, displayed 
with ':'). I/G bit is least significant (Ethernet) 


FDDI_MAC 


char [6] 


FDDI MAC address (any of or or " is 
accepted between bytes on input, displayed 
with '-'}. I/G bit is most significant (FDDI, 
Token Ring) 


CTn Mir 


cxiai loj 


A MAC address - if ':' or " is used between 
bytes on input, it is interpreted as IEEE (I/G 
bit is least significant); if v is used on input, it 
is interpreted as FDDI (I/G bit is most signifi- 
cant). Disolaved as IEEP with 

- wi*#^*»**^ww U«? 1 k>L.L Will • » 


HEX_ STRING 


struct { 
uint32 length; 
uint8 * da tap; 
); 


A hex string. Any of ':' or '-' or " or white- 
space is accepted between bytes. Displayed 
with". 


DEClIETjLy_ADDR£SS 


uintie 


area.node 


0BJECT_ID 


struct { 
uint32 length; 
uint32 * da tap; 
}; 


A variable length array of unsigned decimal 
integers displayed with periods between ele- 
ments. 



Note that support for additional EmWeb types may be added in future releases. 



3.2.5.4. HTML Form PASSWORD Input Fields 

A password field is represented by a null-terminated character string. HTML 
password fields may specify a field size and/or a maximum length. If so, additional 
_size and jnaxiength structure members are added to the form structure to give the 
application run-time control over these values. The format and resulting form 
structure fields of a password input field Is given below. 
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<IHPUT TYPE-PASSWORD NAME -J2 dune {SIZE-*siz } {MAXLENGTH«3maxlength} 
(VALUE-valu ) > 

/* defaults to value, or NULL*/ 
/• defaults to #size •/ 
/* defaults to ftmaxlength •/ 

3.2.5.5. HTML Form CHECKBOX Input Fields 

Checkbox fields are represented as booleans. The optional value field is passed 
unchanged to the browser and is not used by EmWeb. 

<INPUT TYPE-CHECKBOX NAME-Mme {VALUE-value} {CHECKED} > 
boolean name; /+ defaults to TRUE if CHECKED, else FALSE •/ 



char -name; 

uintf <naroe_size; 

ui n t f m jnejnaxl eng t h ; 



Note: if the m^FORM^RsrtmitED bit in the status byte is set on 
submission, then the checkbox was checked and the value is 

TRUE. 

3.2.5.6. HTML Form RADIO Input Fields 

Radio buttons are represented by a C enumerated type generated by the Em Web/ 
Compiler for each unique value assigned to a radio button in the archive. (The 
enumerated types defined by radio buttons and single select options are combined 
Into a single archive-wide enumeration). 

<INPUT TYPE-RADIO NAME -name VALUE-vaiueJ {CHECKED} > 
< INPUT TYPE-RADIO NAME -Mine VALUE - vai u e2 {CHECKED} > 

typedef enum EvaFormEnum ew archive e 

, vaiuei 
,value2 

) Eva FormEnum_e>*^Ar chive ; 

EvaFoxmEnum_ew_arciiive name;/* defaults to checked value •/ 



Restriction: While HTMLallows arbitrary string values for value 
attributes, EmWeb requires that value attributes for radio 
buttons are valid C identifiers since they are used as 
enumerated type identifiers. 

Note that EmWeb/Compiler generates a single enumeration for each archive The 
«L«chiv» suffix may be overridden at the command line (See 3,5. Compiler 
Options, page 23). vuw 

The following function Is provided as a convenience for translating from the 
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enumerated type's integer value to its name as specified by the value attribute: 

const char *evsFormEnumToStiing ( Evscontext context, int value ); 

3.2.5.7. HTML Form IMAGE Input Fields 

Images are "read only" from the point of view of the application as they return the x 
and y image coordinates selected by the end-user from the Web browser. Therefore, 
the generated structure value members are only useful in the ewaFonmSubmit_* 
application function. Structure members are generated representing the x and~y 
coordinates as follows. 

<INPUT TYPE-IMAGE NAME-name SRC-src {ALIGN -align) > 

typedef stzuct Eva Form foos 
{ 

stxucc 

{ 

uint32 na/ne_x; 
uint32 najne_y; 

} value; 
struct 
{ 

uintB name; 

} status; 
} EwaFoxm foo; 



3.2.5.8. HTML Form HIDDEN Input Fields 

Hidden fields are identical to text fields except that they are not displayed (and thus 
not modified) by the browser. They are typically used by applications to pass context 
Information to the browse. This context information is returned to the application 
during submission. 

< INPUT TYPE -HIDDEN NAME-name {VALUE-value} {EMWEBJTYPE-ewtype) > 
EvType name; /* defaults to value if present */ 

3.2.5.9. HTML Form SUBMIT Input Fields 

Submit buttons with name attributes are represented by a null-terminated character 
string. Submit buttons without name attributes are not included in the form structure. 

<INPUT TYPE -SUBMIT {NAME-name} {VALUE -value) > 

char *name; /* defaults to value if present */ 



Copyright® 1997 Agranat Systems, inc. Page 16 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 PCT/US97/13817 

-45- 

EmWeb™ Functional Specification ConBdmau EmWeb/Compiler 

3.2.5.10. HTML Form RESET Input Fields 

No structure member is generated for a reset button. 

3.2.5.1 1. HTML Form SELECT/OPTION Fields 

Select boxes may be used to select a single item from a list (the default), or multiple 
items from a list (if the attribute multiple is present). For single item selection values 
are represented by a C enumerated type generated by the EmWeb/Compiler (The 
enumerated types defined by radio buttons and single select options are combined 
into a single archive-wide enumeration). 

<SELECT HAME-name {SIZE»#size} > 

<OPTION VALUE* vaiuel {SELECTED} > 
<OPTION VALUE»vaJue2 {SELECTED) > 

</SELECT> 

typedef enum EvaFoxmEnum ew archive e 

( 

. value 1 
.values 

) EvaFoxmEnuni_ ew_azchi ve ; 
EvaFoxinEnuin_e«/_arc£ive name;/* defaults to selected value •/ 

For multiple item selection, a status and value form structure field is generated for 
each option as follows: s 

(SELECT NAME-name {SIZB-#size) MULTIPLE > 

<OPTION VALUE- valuei {SELECTED) > desciipcive text 
</SELECT> <OPTION VALDE " VflJue2 {SELECTED} > descriptive text 

boolean vaiuel; /. defaults to TRUE if SELECTED •/ 

boolean vaJue*; /. defaults to TRUE if SELECTED •/ 

uintf name_size; /• defaults to #size ■»/ 

HTML select fields may specify the size of the selection box. If so, an additional 
size structure member is added to the form structure to give the applicatUrun. 
time control over this value. nppucmion run 

Restriction: While HTML allows arbitrary string values for value 
attributes, EmWeb requires that value attributes for select 
options are valid C Identifiers since they are used as 
enumerated type or structure field identifiers. 

3.2.5.12. TEXT AREA 

The textarea value is a nuIMerminated string of characters. Additional value fields 
are placed in the form structure for the number of rows and columns Tin the textarea! 
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These fields are Initialized by EmWeb/Server to the defaults specified in the source 
HTML document, but may be overridden at run-time by the application's 

ewaFormServe_* function. 

<TEXTAREA COLS«#cols ROWS=#rovs NAME « nam© > 
</TEXTAREA> 

char *name; /• null- terminated string */ 

uincf najne_cols; /* default co Itcols */ 

uintf najne_rows; /* default to #rovs */ 

Note that the *name points to the text present in the textahea input field, 
3.2.5.13. File Upload 

RFC1 867 file upload defines a new form input type as follows: 

< INPUT TYPE "FILE NAME" name {VALUE -value} (SIZE«*rovs {, #cols} } > 

Note: Use of file input types requires that the form uses 
multipart/form -data as an encapsulation type. This must be 
specified in the <form> tag as follows: 



<FORM METHOD-POST ENCTYPE-mul tipar t/f orm-data 



This causes the browser to prompt the user for a local (relative to the browser) 
filename (by default, value is used if specified). On submission, the file is uploaded 
to the server along with other form field values. 

EmWeb/Compiler parses file type input fields into the following fields in the form 
value substructure: 

char *name; /• serve only: default filename */ 

EyaFileHandle namejiandle; /* submit only: received file */ 

uintf name_size; /• serve only: #iovs (no #cols) */ 

u * ntf name_rovs; /* serve only: irrovs <v/#cols) */ 

uintf ume^cols; /* serve only: #cols */ 

In addition, the following fields In the form status substructure are generated as well: 

u f nt8 name; /* status for filename */ 

uintB namejiandle; /* status for received file */ 

For more detailed Information on the file upload interface, please refer to 4.1.8. Local 
Filesystem Interfaces, page 54. 

3.2.6. Graphic Maps 

The HTML ismap attribute on an imc tag specifies that the file is an image map. Such 
an imc tag must always be enclosed within an anchor that specifies a hyper-link URL 
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The ismap attribute causes a click within the image to be sent as a request to the URL 
in the enclosing anchor, qualified by the x & y coordinates of the click within the image. 

EmWeb provides support for image maps through a map element in the HTML source 
tree which specifies rectangular regions and URLs to be associated with them. 

The interface designer creates an image map fiie, a text file which defines the URLs 
to be provided for each region of the image. The syntax of the entries is: 

xect-line | default-line 

xect-line :: . Z ect uzl point point 

point :S o x,y 

default -line ::• default uil 

The rect token specifies aURL to be served in response to the specified top-left and 
bottom-nght coordinates. The optional default specifier provides the URL for anv 
coordinaenot specified by some xect (only one default is allowed) Order of the r ^t 
lines is significant - If the regions overlap the first match takes precedence 

If no match is found, and no default is specified, the server returns "no content" to the 
browser, effectively a no-operation. Otherwise, the matching URL is relumed to Se 
browser as a redirection. The URL may be relative to the map file in or 

The map files are compiled by EmWeb/Compiler so that they do not need to be parsed 
at runtime by the EmWeb/Server. The following illustrates L syntaJ !?a Tmap 

xect examplei.html 15, IB 169,37 
tect example2.html 157,46 385,65 
rect example3.html 365,71 460,87 
default /home. html 

If the above file was "sao^ie.map", and corresponded to the imaqe Voictur^/ 
sa^ie.gif, the following HTML would be used to implementthe map: /pi " ures/ 

<A HREP-8ai.ple.inap-> <img S»C-/pictuxe S / S a^le.gif •• ISMAP> </A> 

By convention, map files use the suffix '.map', but this can be changed See 3 3 
mime.types Configuration File, page 20, and 3.4. .ACCESS Rles, page 22. 

3.2.7. Cache Control 

The HTTP/1.0 protocol has some simple provisions for communicating cachabilltv 
information to caches and proxies between the server and the b owser HTTP/M 
provides even greater cache control features. wowser, n 1 1 r/i .i 
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By default, EmWeb/Server classifies compiled-in documents as being either static or 
dynamic. A document is considered dynamic if it contains one or more emweb strings, 
emweb_xmclcdes, or EmWeb-enhanced HTML forms. Otherwise, the document is 
static. 

When serving a static document, EmWeb/Server sends a Last-Modified HTTP header 
indicating the time and date that the corresponding archive was created by the 
EmWeb/Compiler. No other cache control headers are generated in HTTP/1 .0. With 
HTTP/1.1, a Cache-Control header is generated indicating either "public" if the 
document is not protected by an authentication realm, or 'private" if it is. 

When serving a dynamic document, EmWeb/Server sends a Last-Modified and 
Expires HTTP header indicating the current time and date, as well as "Pragma- no- 
cache" for HTTP/1.0 and "Cache-Control: no-cache" for HTTP/1.1. r 

It may be desirable to override the above default behavior for certain applications. 
Specifically, an application may desire static treatment of a dynamic document. For 
example, If emweb_include tags are used to insert common headers and footers 
EmWeb/Server would treat the document as dynamic even though the content may 
actually be static. The following EmWeb tag may be used anywhere in an HTML 
document to mark it as static for cache control purposes: 

<EMWEB_STATIC> 

3.2.8. EmWeb CGI 

The mechanisms described above are designed to meet most needs of the system 
designer without having to deal with the complexities of direct access to the HTTP 
input and output mechanisms. If such access is desired, the EmWeb raw CGI Interface 
provides access similar to that available in a CGI program environment on any HTTP 
server. See 4.1.6. Raw CGI, page 51. 



3.3. mime.types Configuration File 

The nime . types configuration file is read by Em Web/Compiler before processing source 
directories of HTML and other Web documents. If "-m" is specified on the EmWeb/ 
Compiler command line, then the specified file is used. Otherwise, EmWeb/Compiler 
searches for a mime . types file by first looking at the semwebjcme environment variable, 
and then looking at semweb_home/$emweb_mim£. If the s emweb mime environment variable 
is not specified, It defaults to "mine, cypes". If the semweb home environment variable Is 
not specified, ft defaults to "/usx/local/share/emveb". 

The mime.types file contains default parameters for files derived from the file name 
suffix. For example: 

9 

# EmWeb/Compiler mime.types file example 
« Anything after a is a comment. 

# A lin vhose first character is white spac is a continuation line 
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Each specif iei oust nd in ';' 



.html . 
.txt 
• gif 



type- text/html paxse-emvebjitml compress ; 

type* text/plain paxse-eniveb_text compiess ; 

type-image/gif paise-binary"; 

imagemap; 

index-index.html; 



The suffix may be any tall match; It is not restricted to values starting with 7. The 
mime . types file contains specifiers for the default access rights and parameters of files 
ending wfth a particular suffix. Each specifier is the file name suffix, followed by one or 
more of the following attributes, followed by a semicolon: 

type=mime-type 

Specifies the MIME encapsulation media type represented by the file. Media 
type values are registered with the internet Assigned Number Authority 
(IANA). Use of non-registered media types is discouraged. (Note that the 
mime -type must be quoted if it contains a 7 line-terminator character). The 
default type depends on the parser selected (see below). 

parse=e/7web_Mm/ / emwebjext / text / binary 

Specifies how the Em Web/Compiler is to parse the file. 

emweb_html indicates that the file contains HTML and the EmWeb/Compiler 
handles <emwebj>tring>, <emweb included <emweb proto> 
<emwebhead>, and EmWeb HTML forms. The default type" for the 

EMWEB JiTML parser is "text /html". 

emwebjtext indicates that the file contains text which may contain 

<EMWEB_STRXUG> , <£MWEB_INCLUDE> , < EMWEB PROTO> and < EMWEB HEM» 

directives. However, such a file may not contain EmWeb HTML forms. The 
default type for the emwebjtext parser is n text/piain\ 

text indicates thatthe file contains text which should not be parsed (e g 
PostScript). The default type forthe text parser is "text/piain". 

binary indicates that the file contains raw binary data. The default type for 

the BINARY parser is "application/occet-stiearo w . 

The default parser is binary if not otherwise specified. 



Specifies that the content should be compressed. The EmWeb 
compression algorithm creates an archive-wide dictionary of common 
strings which are referenced by the individual documents. Compression 
ratios for text files of 50% can be achieved if there is sufficient redundancy 



compress 
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throughout the archive. However, compression ratios will vary widely among 
applications. The default is no compression. 

nocornpress 

Specifies that the content should not be compressed. (This is typically used 
in an _access file to override a specification in mime . cypes). The default is 
no compression. 

imagemap 

Specifies that the content is an imagemap that defines the coordinates for 
an image. This implies "hidden", and inherits realm membership from the 
current directory. 

ignore 

Specifies that the entry should be skipped (i.e. not included in the archive). 
This is typically used to exclude source control directories, backup files from 
editors, etc. 

The current directory is specified using 7 as the suffix name. Directories may contain 
the attribute: 

index=/ndex-//7e-na/ne 

The element (in the directory) to be returned in response to an access 
request to that directory (a URL whose last component is the directory 
name). 



3A_ACCESS Files 

Access to individual files and directories is controlled by a configuration file in each 
source archive directory named '_access\ The _access files contain specifiers for the 
access rights of elements in the corresponding directory (and optionally for the directory 
itself using the 7 specifier). Specifiers in the ^access file override specifiers in the 
mime. types file. Each specifier is the file name" (not a suffix) followed by any of the 
attributes defined above for mime. types. The following additional attributes are 
permitted in _access files. 

realm** rea/m-name 

requires that any request to access the file or directory must be 
authenticated in the named realm. If an empty realm is given (i.e. realm-—), 
then the file may be accessed without any authentication. See 4.1 A 
Authentication and Security, page 39. 

hidden 

Specifies that the file is included for use in constructing dynamic content and 
may not be seen or accessed directly by a Web browser. (Note that the 
hidden and realm attributes are mutually exclusive). 
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link=i/r/ 

Specifies that this element is linked to a different URL When accessing this 
file, the browser shall be redirected to the specified relative or absolute URL 
The link attribute may not appear with any other attributes. 

If realm is specified for a directory, it applies as a default for all files and subdirectories 
within the current directory. Specifications for individual files in an _access file override 
defaults specified for the directory. 

If hidden is specified for a directory, it applies as a default for all files and 
subdirectories within the current directory, individual files and subdirectories may be 
overridden by specifying a realm. 

Note that a default 7 specification for index may be included in the mime . types file arid 
overridden in individual ^access files. 

In addition to the elements in the directory, the _access file may specify the base name 
for CGI elements (which do not need actuaf files in the HTML tree). These are 
specified with the access attribute cgi below and may also have a realm attribute. 

cg\=$ymbol 

The element is a CGI application. The symbol value is used by the Em Web/ 
Compiler to generate application-specific prototypes for the raw-CGI 
interface. See 4.1.6. Raw CGI, page 51. 

Finally, form action URLs used when a browser submits an EmWeb HTML form to the 
EmWeb/Server may be protected by a specific realm which may be different from the 
realm of the document containing the form. In this way a form may be used to display 
data to a less restricted realm, while permitting changes only from users in a more 
restricted realm. For example, if the HTML file "example. html" contained an EmWeb 
HTML form tag <form method-post emweb_name ° f oo AcrcoN«bax>, the following 
specifier may appear in the _access file corresponding to the directory containing 

"example. html". . 

example, html /bax iealm-xeai.ro -name 



Access control is only computed by the EmWeb/Server on the initial URL; if the 
element to be returned in response to the URL includes an emweb_xnclude tag, the 
EmWeb/Server does not perform an access check on those individual elements. 

3.5. Compiler Options 

The EmWeb/Compiler program "ewe" takes the following command-line arguments 
followed by a list of one or more directories and/or files with which to build an EmWeb 
archive. 
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( -n | -nam ) <archive-symbol-base-name> 

The base symbol name produced by EmWeb/Compiler corresponding to 
the object part (and, If -c is.also specified, the data part) of the archive. By 
default, this parameter is 'ev_archive B . Thus, the following symbol is 
generated by the EmWeb/Compiler in ev_code.c: 

BvsArchive ev_archive; 

And If the -c option is specified, the following symbol is generated in 

ev_data.c, 

uiace ev_axchive_data[] ; 

( -m J -mime ) <mlme.types filenamo 

The path name to the mime. types configuration file. By default, EmWeb/ 
Compiler looks in $emweb_kike (mime, types) followed by semweb home/ 
$EMWEB_MIME {/usz/ local /sh&z e/emweb/mime . types) . " 

( -u | -url ) <archive-url-base-path> 

The base URL path of the generated archive. By default, this is y\ 

(-r|-raw)| (-c|-c) 

The output format of the generated archive data component (raw by 
default). If - -xav is specified, the data component of the archive is written to 
the file ev_data.dat as a raw binary file. If -- c is specified, the data 
component of the archive is written to the file ew_data.c as a C file that, 
when . compiled, produces an array of data reTerence by the symbol 
ev_archive_data. Both flags may be specified on the command line to 
cause the generation of both raw and C output files. 

( -o | -output ) 

Theprefixforgeneratedfilesdata.dat, data.c, codec, stubs. c, and 
proto.h ("./ev_" by default). 

( -s | -stubs ) 

Generate ev_scubs.c file containing stubbed-out versions of form and CGI 
functions normally provided by the application to facilitate rapid prototyping 
and development 

( -C | -no-compress ) 

Disable compression of the archive. (Overrides compress attribute in 

mime, types and_ACCESS files). 
(-11 -little) 

The byte-order of the generated archive data component By default, a big- 
endian archive is generated. If .-little Is specified, then a little-endian 
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ew.stubs.c 

If the * - stubs option is specified at the command line, this file is generated. 
It contains stubbed-out versions of form and CGI functions normally 
provided by the application to facilitate rapid prototyping and development. 
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archive is generated. 



( -P | -no-preprocessor ) 

Disable generation of #iine preprocessor directives in generated 
ew_code.c file; normally, these directives are included so that the C compiler 
and debuggers can find the original C in the source HTML documents. This 
option should only be used If your C compiler does not understand the 
'#iine' directive. 

( «q | -quiet ) I ( -v | -verbose ) I ( -d | -debug ) 

The logging level. The -quiet options suppresses all but error messages. 
The • - verbose is specified, more logging output is produced. The - - debug 
is specified, still more logging output is produced. The default (non of these 
options specified) includes errors and some warning messages. 

( -v | -version ) 

Displays the EmWeb/Compiler's version. 



Two dashes in a row indicate the end of options. All remaining parameters 
are file and/or directory names. This is optional, as any parameter that does 
not begin with a is assumed to be a file and/or directory name 



3.6. Compiler Output 

The EmWeb/Compiler produces the following output files: 
ew_data.dat 

A raw binary file containing the data component of the archive. 
ew_data.c 

If the - - c option is specified at the command line, this file is generated It 
contains C code that, when compiled, defines an array of octets 
representing the data component of the archive and referenced by the 

global Symbol uintS ev_axchive_datalJ. 
ew_code.c 

A C file that, when compiled, defines the object component of the archive 
referenced by the global symbol (BwsAtchive) ev_ az chive. 

ew_proto.h 

This C header file is generated If the archive contains EmWeb HTML forms 
or CGI documents.. The header file defines function prototypes and data 
structures for an application-specific Interface between EmWeb/Server and 
application-provided functions responsible for serving and submittina forms 
and/or raw CGI processing. a 
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4. EmWeb/Server 

The EmWeb/Server is written in portable ANSI C and is easily integrated into a wide 
variety of embedded application environments, EmWeb/Server implements the HTTP 
protocol and responds to requests from networked Web browsers with documents stored 
in run-time archives created by the EmWeb/Compiler. 

The following figure Illustrates a typical EmWeb/Server device management application. 
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4.1. Application interfaces 

The EmWeb/Seiver application interfaces are divided into six functional areas including 
system interfaces, network interfaces, document and archive maintenance, 
authorization and security, request context access, and raw CGI. 

Many application interfaces are optional and can be configured out of the EmWeb/ 
Server at compile time. This offers the system integrator flexibility in balancing the trade- 
offs between functionality, memory requirements, and system performance. 

Most application interfaces are provided by the EmWeb/Server and are called by the 
application. However, some application interfaces must be provided by the application 
and are called by the EmWeb/Server. Function names beginning with 'ews" and data 
types beginning with *Ews B are defined by the server for use by the application. Function 
names beginning with "ewa" and data types beginning with "Ewa M must be defined by 
the application for use by EmWeb/Server. 

Status codes returned by the EmWeb/Server to the application are of type EwsStatus 
and are defined as follows (from src/indude/ev S _def .h): 

/• 

• status codes returned to the application by EmWeb/Server 
•/ 

typedef enum EwsStatus e 
{ 

EWS_STATOS_OK, 
EWS~STATUS_BAD_MAGIC , 
E WS^S TATUS_B ADJ/ERS I ON , 
EWS~STATUS_ALREADY_EXISTS , 
EWS_STATUS_NO_RE SOURCES , 
EWS~STATUS_INJJSE , 
£WS_STATOS3*0T_REGISTERED r 

ews_status_not_cloned , 
ews2status"not"found , 
ews_s tatus_auth_fai led , 

EWS_STATOS JBAD_STAT£ , 
EWS~S TATUS_BAD_REALM , 
EWS_STATt/S_FATAL_ERROR, 
£WS~STATUS_ABORTED 
} EwsStatus; 

Status codes returned by the application to the EmWeb/Server are of type EwaStatus 
and are defined as follows (from src/inciude/ev S _def .n) : 

/■ 

* Status codes returned to EmWeb/Server by the application 
*/ 

typedef enum EwaStatus e 
( 

EWA_STATUS_OK, 
EWA_STATUS~0K_YXEXI> , 
EWA STATUS ERROR 
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} EvaStatus; 

4.1.1. System Interfaces 

The system functional interfaces are further divided into four functional areas including 
initialization, scheduling, memory management, and time-of-day services. 

4.1.1.1. Initialization and Shutdown 

Before any other application interface function may be used, the EmWeb/Server 
must be initialized. This is accomplished by invoking the following function: 

EvsStatus evslnit ( void ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (ews_status_no_resources is returned if EmWeb/Server was unable to 
allocate memory for inTernal hash tables, etc.). 

A graceful shutdown of the EmWeb/Server can be accomplished by invoking the 
function below. This causes EmWeb/Server to terminate all outstanding HTTP 
requests and release all dynamically allocated resources. 

Ewsstatus ewsShutdovn ( void } ; 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). 

4.1.1.2. Scheduling 

The EmWeb/Server is capable of serving multiple HTTP requests simultaneously. It 
may be configured at compile-time to use either its own internal real-time scheduler 
or to make use of an external scheduler provided by the application's operating 
system. 

If an external scheduler is to be used, HTTP requests may be multi-threaded if each 
TCP connection is handled by its own operating system thread. Otherwise, requests 
will be single-threaded. The evsKuno, ewssuspendo and evsResumeO functions 
described below for EmWeb/Server's internal scheduler would not be used. Instead, 
all application <emweb_string> and <emweb_include> code fragments and 
evaFoimserve_* and ewaFormsubmi t_* functions are invoked from the 

evsNetHTTPRecei ve { ) function. 

If the internal scheduler is to be used, HTTP requests are served from the following 
function: 

EvsStatus evsRun ( void ) ; 

This function returns ews_status_ox on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). All 
application <ekweb_string> and <ewweb_include> code fragments and 
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evaFormSexve_* and evaFormSubmi zj* functions are invoked from evsRunO . 

The ewsRuno function processes any outstanding HTTP requests until either all 
requests have been served, orthe application requests that Em Web/Server yield the 
CPU as follows. Each time Em Web/Server sends a buffer of HTTP response data to 
the network via the application-provided evaNetHrrpsend function, the application 
may return the status ewa_statos_okyield to request that the EmWeb/Server 
relinquish control of the CPU. This will cause the EmWeb/Server to return from the 
ewsRun ( ) function immediately. (Note that if the last buffer of the HTTP response was 
transmitted, the EmWeb/Server will close the connection and release any 
corresponding resources before returning control to the application). 

In addition, the internal scheduler gives the application a means to temporarily 
suspend a specific HTTP request each time it invokes application-specific code from 
<emweb_string > , <emweb_include>, and HTML form serve and submit functions. The 
application may instruct EmWeb/Server to suspend an HTTP request from the 
application-specific code provided in <emweb_string> and <emweb_include> Ccode 
fragments, and EvaFormsexve_* and Evaroxmsubmi t_* functions by invoking the 
following function before returning to the EmWeb/Seiver. 

EwsStatus ewssuspend ( EvsContext context ); 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned (ews_status_bad.state). When the application returns to EmWeb/Server 
after invoking ewssuspend, the EmWeb/Server may continue to process other 
outstanding requests from evsRunO before returning control to the application Note 
that the value returned by the application after calling ewssuspend is ignored. The 
application's <emweb_string> or <emweb_include> C code fragment or 
evaFormseive_« or ewaFormsubmi t_* functionls re-invoked when the request is 
resumed. This functionality makes It possible to implement proxy servers (i.e. a local 
HTTP request might cause the application to send an IPC message to another 
process and suspend EmWeb/Server processing of this request until an IPC 
response is received). The application can resume a previously suspended request 
by invoking the following function. 

EwsStatus ewsResume { EwsContext context, EwaScatus status ); 

Status can be either ewa_status_ok or ewa_status_okyield. if the status is 
ewa_status_ok, then the resumed request may be scheduled right away (tor 
example, this could cause ewsRun to be invoked internally). Otherwise, the 
suspended request is scheduled to run, but is not actually run until control is 
transferred back to EmWeb/Server. This gives the application control over which 
CPU thread processes HTTP requests (i.e. asuspended request may be resumed 
by an interrupt handler for execution later in a polling loop that calls ewsRun). This 
function returns ews_status_ok on success. Otherwise, an error code is returned 
(ews_status_bad_state). 
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The following function may be invoked from within the application's <emweb string > 

ox <EMWEBINCLUDE> C COde fragment Or ewaFormS rve_« Or evaFormSubmit • 

function to determine if this is the initial invocation of the application code or if the 
code is being resumed. 

boolean evsContextlsResuming ( EvsContext context ); 

This function returns true if the application code is being re-invoked after 
ewsResume. Otherwise, this function returns false. 

4.1.1.3. Memory Management 

The EmWeb/Server requires the application to provide simple memory management 
for the allocation and release of temporary data-structures used throughout the 
processing of HTTP requests and maintaining the run-time document archive and 
authentication databases. These functions are equivalent to the POSIXmaiioc and 
fiee calls as follows: 

void * evaAlloc ( uincf bytes J ; 
void ewaFiee ( void • pointer ) ; 

The evaAlloc function (or macro) returns a pointer to available memory of at least 
• the specified number of bytes long. or null if no memory is available. The evaFree 
function (or macro) returns a block of available memory previously allocated bv 

evaAlloc. 3 

Note: If the EmWeb/Server is unable to allocate memory 
during the processing of a particular HTTP request, the 
request is aborted, all resources related to the request are 
released, and the application's evaKetHTTPEnd o function is 
invoked. Alternatively, the application may implement 
evaAlloc o so as to block until resources are available using 
external operating system facilities. 

4.1.1.4. Time-of-Day Management 

Some of the optional HTTP/1.0 functionality requires a "time-of-day" for Date- 
Expires:, and Last-modified: headers. Many embedded systems do not have a 
reliable time-of-day capability, so these features are configurable options in EmWeb/ 
Server. To take advantage of these features, the application must provide the 
following function (or macro): p 

const char * evaDate { void ); 

tormate- ^ Sh0UW ^ {QMT) h °" e 0f the fo,,owin 9 

RFC1 123: (Preferred) 

Fri, 08 Jun 1996 08:57:28 GMT 
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RFC850: 

Friday, 08-Jun-96 08:57:28 GMT 

4.1.2. Network interfaces 

The EmWeb/Server relies upon a pre-existing TCP/IP protocol stack available in the 
target software environment The interface between the application's TCP/IP protocol 
stack and the EmWeb/Server is event driven. This approach makes it possible to port 
EmWeb/Server to a wide variety of software environments. 

4.1.2.1. Network Buffer Management 

The EmWeb/Server design assumes that the application maintains data buffers for 
the reception and transmission of TCP data. 

Buffers can be uniquely identified by an application-defined buffer descriptor. No 
assumptions are made about the actual structure of the buffer descriptors or their 
relationship to the data. For example, a buffer descriptor could be an index into a 
table, a pointer to a structure (either contiguous or separate from the data 
represented), etc. The application is responsible for defining the appropriate type for 
EwaNetBuf f er and a value for ewa_net_buffer_null. 

Buffers can be chained together. Given a buffer descriptor, EmWeb/Server must be 
able to get or set the "next buffer in the chain" field. This is done by the 

ewaNetBuffexNextSet and ewaNetBuf f erNextGet functions (or macros). Note that 

the buffer chain is terminated when the next buffer value is ewa_net_buffernull. 

EwaNetBuf fer ewaNetBuf ferNextGet ( EwaNetBuf fex buffer ) ; 

void ewaNetBuf ferNextSet ( EwaNetBuf fer buffer, EwaNetBuf fer next ); 

Given a buffer descriptor, EmWeb/Server can determine the start of data in the 
buffer. Additionally, EmWeb/Server may change the start of data in the buffer 
(EmWeb/Server only moves the pointer to the data upward (increments)). This is 

done by the ewaNetBuf ferDataGet and ewaNetBuf ferDataSet functions (or macros). 

uint8 * ewaNetBufferDataGet ( EwaNetBuf fer buffer ) ; 

void ewaNetBuf ferDataSet ( EwaNetBuf fer buffer, uinte *datap ); 

Given a buffer descriptor, EmWeb/Server can determine the size of contiguous data 
in the buffer. Additionally, EmWeb/Server may change the size of the buffer 
(EmWeb/Server only changes the size of the buffer downward (decrements)). This 

is done by the ewaNetBuf f erLengthGet and ewaNetBuf fer Lengths ec functions (or 

macros). 

uintf ewaNetBuf f erLengthGet ( EwaNetBuf fer buffer); 

void ewaNetBuf ferLengthSet { EwaNetBuf fer buffer, uintf length ); 
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EmWeb/Server may allocate a single buffer by invoking the ew aN tBuff eiAiioc 
function (or macro). The application may return a buffer of any size to EmWeb/ 
Server. The size of the buffer must be initialized to the number of bytes available in 
the buffer for EmWeb/Server. If no buffers are available, this function returns 
ewa_net_buffer_»ull. Additionally, EmWeb/Server may release a chain of one' or 
more buffers by invoking the ewaNetBuf ferFree function (or macro). 

EwaNetBuffer ewaNetBuf ferAlloc ( void ); 
void ewaNetBuf ferFree (EwaNetBuffer buffer); 

Note: If the EmWeb/Server is unable to allocate a network 
buffer during the processing of a particular HTTP request, the 
request is aborted, all resources related to the request are 
released, and the application's ewaNetHTTPEndo function is 
invoked. Alternatively, the application may implement 
ewauetBuf f erAiioc o so as to block until resources are 
available using external operating system facilities. 



4.1.2.2. TCP/IP Interfaces 

The application is responsible for listening to the HTTP TCP port (80) for connection 
requests When an HTTP TCP connection request is received, ihe SSStaJ 
Son- connection on bem ot EmWeb/Server and invokes the following 

Bwscontext ewsNetHTTPStart ( EwaNetHandle handle ); 

This function returns a new context handle which the application is expected to use 
when referencing this HTTP request for future operations. The value 
ews_context_null is returned on failure (e.g. no resources available to handle the 
new request). The handle parameter is application-defined and is returned to the 
application unchanged by the EmWeb/Server in other network interface calls as 
illustrated below. The handle is also made available to <emweb strino and 

<EMWEB INCLUDE > C Code fragments and ewaFoxmServe - and ewa~ForinSubmit . 

application functions by invoking the following function: ~ 



EwaNetHandle ewsContextNetHandle ( Bwscontext context 



At any time, the application can abort an uncompleted HTTP request by invokina the 
following function: ' y 

EwsStatus ewsNetHTTPAboxt ( Bwscontext context ); 

This function is typically Invoked by the application to notify EmWeb/Server that the 
corresponding TCP/IP connection has been disconnected. The function returns 
ews_statos_ok on success. Otherwise, an error code - is returned (There are 
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currently no conditions that cause an error to be returned). 

As data buffer(s) are received from the network on a TCP connection corresponding 
to an HTTP request, the application passes these buffers to the EmWeb/Server by 
invoking the following function. 

EwsStatus evsNetHTTPReceive (EvsContext context, EwaNetBuffez buffer); 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). The 
buffer parameter describes a chain of one or more buffers containing raw TCP data. 
The structure of the buffers is determined by the application, and the application 
provides EmWeb/Server with functions to manipulate these buffers as defined 
previously. Note that EmWeb/Server takes responsibility for releasing received 
buffers when they are no longer needed, and may hold on to buffers containing 
certain HTTP request headers for the duration of the request. 

When EmWeb/Server has assembled one or more buffers for transmission, it 
invokes the following function (or macro) which must be provided by the application: 

EwaStatus evaNetHTTPSend ( EvaNetHandle handle, EwaNetBuffex buffer ); 

This function transmits (and then releases) a chain of one or more network buffers 
and returns ewa_status_ok or ewa_status_ok_yield on success, or 
ewa_status_error on failure. If the application returns ewa_status ok, EmWeb/ 
Server will continue processing outstanding requests in a round-robinTashion. If the 
application returns ewa_status_ekror, EmWeb/Server will abort the current request 
(as if ewsNetHTTPAbort o was called) and continue processing any other outstanding 
requests. The application returns ewa_statos_ok_yield to request that EmWeb/ 
Server give up the CPU. In most cases, ewaNetHTTPSend o is called for each buffer's 
worth of HTTP response data generated by the EmWeb/Server. Thus, the CPU used 
by the server can be throttled by adjusting the buffer size available to the server and 
using the ewa_status_ok_yieu> return code. (See 4.1.1.2. Scheduling, page 29). 
Note that use of this return code requires that the application eventually either 
reschedule processing of the request by invoking ewsRun, or abort the request by 

Invoking ewsNetHTTPAbort. 

The application may signal the EmWeb/Server with flow control events to indicate 
congestion on an outbound TCP connection. If a TCP connection's transmit window 
is full, the application may call the following function at any time: 

Ewsscacus evsNetFlovControl ( Ewscontexc context ) ; 

This will cause the EmWeb/Server to temporarily suspend processing of the request 
When the TCP connections window opens again, the application may invoke the 
following function at anytime to notify EmWeb/Server that processing of the request 
may continue: 
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Ewsstatus ewsNetllnFlowContxol { EwsContext context) ; 

If evsuetFiovcontroio is called from the ewaNeurrrpsendo function, then the 
application is responsible for transmitting the current buffer. However. 
evaHecHTTPsendo wiJI not be called again until the application has called 
ewsNetonFiowcontxoio. Note that if ewsMecFiowcontroio is invoked from outside 
ewaNecHrrpsendo, then EmWeb/Server may call evaNetirrrpsendo once before 
suspending the request In any case, the application should be prepared to receive 
notification of request completion as described below. 

When the EmWeb/Server has completed processing an HTTP request or if the 
application aborts an outstanding HTTP request by invoking ewsNetHTTPAbort o It 
invokes the following function which must be provided by the application: ' 

EwaStatus evaNetHTTPEnd ( EwaNetHandle handle ) ; 

This function should close the TCP connection corresponding to the request and 
return ewa_statos_ox or ewa_status_ok_yield on success or ewa status error on 
failure. Note that returning £wa_statos_ok_yieu3 causes EmWeb/Server To give up 
the CPU. Otherwise, EmWeb/Server may continue processing other HTTP requests 
in progress. 

If persistent connections are used, it is possible that several HTTP requests will be 
handled over a single TCP/IP connection. For some applications, ft is necessary to 
reset application-specific state information and to release application-specific 
dynamic resources after each HTTP request The following function may be 
provided by the application for this purpose: 

void ewaNetHTTPCleanup ( EwaNetHandle handle ) ; 

This function must be provided by the application or defined as a empty macro It is 
invoked by EmWeb/Server when a request completes, allowing the application to 
reset any processing state stored in the network handle. Note that for persistent 
connections, this routine may be called several times for the same connection as 
one connection can be used for multiple requests. This routine will be called before 

ewaNetHTTPEnd () is invoked. 

The EmWeb/Server must have access to an application-provided null-terminated 
character string representing the HTTP network location (eq 
www.agranatcom:80". Note that the host name (left of the \") may be a dotted 
decimal IP address. Also note that the ':<port-number>' may be omitted if the 
standard HTTP TCP port #80 is used. This string is returned by the following 
application-provided function (or macro). 

const chai • ewaNetLocalHostMame ( EwsContext context J; 
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4.1.3. D cument and Archive Management 

The EmWeb/Compiler generates an archive of one or more documents. Documents 
can be HTML files, JAVA programs, graphical images, or any other information 
resource addressable by a URL Archives may be independently loaded or unloaded 
into the EmWeb/Server. 

In most applications, the entire set of available documents are compiled into a single 
archive and loaded at boot time. However, some applications may desire to 
dynamically load archives at run-time as needed in order to reduce memory 
requirements. Jn fact, applications may implement a scheme similar to virtual memory 
page swapping under some operating systems to cache an active set of documents in 
memory while storing other documents in a secondary storage area. Such a 
secondary storage area could be in FLASH memory, disk, or on a remote server using 
TFTP or other protocols to load documents at run-time. 

An EmWeb archive consists of two components. First, there is the archive data 
component containing the database of compressed documents, information about 
how to construct dynamic documents at run-time, access controls, etc. Second, there 
is the archive object component containing the run-time object code used for the 
construction of dynamic documents, etc. 

Operating systems supporting the run-time loading and linking of object code may off- 
load both the data and object archive components to a secondary storage area 
Otherwise, only the data components are off-loaded while the object components are 
statically linked into the run-time executable image. 

Each archive contains an archive descriptor in the object component The archive 
descriptor is referenced by a public symbol generated by the EmWeb/Compiier. 

4.1.3.1. Installing and Removing Archives 

In order to activate an archive at run-time, the application must invoke 
ewsDocumentinscaiiAichive with parameters indicating the address of the data 
component and the archive descriptor of the object component. 

EwsS ta cus e vsDocuinentlns ta 1 lAi chive 

( EwsArchive descriptoz, const uintB *datap >; 

This function may return one of the following status codes: 



ews_status_ok 
ews~status"bad magic 



The data or object portion of the archive is 
invalid or corrupt. This may happen if the 
EmWeb/Server is configured for a big-endian 
archive when the EmWeb/Compiler generated a 
little-endian archive, or vice versa. 



The archive vas installed successfully 



EWS STATUS BAD VERSION 



The archive generated by the EmWeb/Compiler 
is not understood by the EmWeb/Server . 



EWS STATUS ALREADY EXISTS 



The archive has already been installed. 
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EWS_STATOS__INUS£ The archive contains a document vith a URL 

that has been previously loaded from a 
different archive. 

EWS_STATUS_NO_RESOURCES Insufficient dynamic memory is available to 

install the archive. 

The archive may be deactivated by invoking ewsDocumentRemoveArchive. 

EvsStatus ewsDocumentRemoveArchive { EvsAxchive descriptor ) ; 

These functions return ews_status_ox on success. Otherwise, ew_status in use is 
returned indicating that the archive contains documents that are eitherbeing 
processed by outstanding HTTP requests or that have been cloned to other URli. 

The fixed data component of an archive contains the name of the archive and the 
date it was created by the EmWeb/Compiler. These values may be retrieved as 
foliows: 

const char * evsDocunentAichiyeName ( const uintB *datap J; 
const char * ewsDocumentArchiveDate < const uint8 *datap ) '• 
const char * evs2)ocuoentAxchiveDatei036 ( const uint8 -datap ); 

4.1.3.2. Demand Loading 

in order to implement on-demand archive loading, the application may register 
document URLs with the EmWeb/Server which are valid but not loaded. This is done 
by invoking the following function: 

EvsDocuxnent 

evsDocumentRegistei (const char *url, EvaDocumentKandle handle); 

This function returns an EmWeb/Server document descriptor of type Evsnocument, 
orEws^DocuMENT^Nuu. on error. The handle is an application-defined value passed 
back unchanged to the application in evaDocumentFauit as shown below. 

If a registered document is requested by a Web browser, then EmWeb/Server 
notifies the application by invoking the following application-provided function: 

EvaStatus 

evaDocumentJault ( EvsContext context, EvaDocumentHandle handle ); 

At this point, the application may load a new archive (possibly removing a previously 
installed archive to make room). When the archive containing the page is installed 
the EmWeb/Server automatically completes processing the request when the 
archive is loaded. The request can be aborted either immediately by returning 
ewa_statos_£rror from the ewaDocument Fault function, or by invoking 

evsNetHTTPAbort. 

Once a document is registered, there is no need to re-register it in the event that the 
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corresponding archive is removed. EmWeb/Server remembers that the document 
has been registered as dynamically loadable. However, the application may de- 
register a document by invoking the following function: 

EwsStatus evsDocumentDeregistei ( EvsDocument document ) ; 

This function returns ews_status_ok on success. Otherwise, ews_status_in_use is 
returned indicating that the document was cloned or not registered. 

4.1.3.3. Cloning 

Documents may be cloned and assigned to a new URL This allows multiple 
instances of a document to exist while minimizing the storage requirements; An 
application-specific handle can be used to identify an instance of a document from 
the request context. 

The application clones a document by invoking the following function: 

EvsDocunentevsDocument Clone 
( const char *baseuxl, const char »nevuil, EwaDocumentHandle handle ); 

This function returns a document descriptor lor the clone, or ews_document_nuli. on 
error. 

The cloned document may be removed by invoking the following function: 

EvsStatus evsDocumentRemove { EvsDocument document ) ; 

This function returns one of the following status codes: 

EWS_STATUS_OK The document was successfully lemoved 

EWS_STAT0S_NOT_CLONED The document is not a clone. 

EWS_STATUS_INJUS£ The document is itself cloned. The clone of 

the clone must be removed first. 

All clones created from documents in an archive must be removed before the archive 
can be removed. 

Note that the application's document handle is made available to the application in 
the HTTP request context by invoking the following function: 

EwaDocumentHandle evsContextDocumentHandle ( EvsContext context ) ; 

If the document corresponding to the context was not cloned or registered by the 
application, then this function returns ewa_doojmentjiandle_null. 

4.1 .3 A URL Rewriting 

In some applications, it may be desirable to translate between URLs advertised to 
the outside world and URLs configured in the archive. The optional URL hook feature 
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provides the application with an opportunity to rewrite a requested URL before 
EmWeb/Server looks up the URL in Its archive database. The following function (or 
macro) may.be provided by the application for this purpose: 

chai * ewaURLHook ( EvsContext context, chai * uil ); 

This function passes the requested URL and request context to the application. The 
application may simply return url if no rewriting is desired, or it may return an 
absolute local URL to substitute. The returned URL is looked up in the archive and 
served as if requested directly. If the application returns null, the request is aborted. 

This functionality is intended to allow the application to select a subdirectory of 
documents based upon requested language, content encodings, and other 
information available from the request context. 

Note that this function may rewrite and return any portion of the url string parameter 
(provided that the string's length is not increased), or return a completely different 
string buffer instead. If a different buffer is used, the server copies the value 
immediately. 

41.3.5. Document Data Access 

In some applications, It may be desirable to access the content of a file pointed to by 
a URL directly (e.g. data files used by CGI scripts, etc.). The following function is 
optionally provided by the EmWeb/Server to the application for this purpose: 

EwsStatus evsDocumexitDa ta 

( const chat * uxl, uint32 •bycesp, const uints ••datapp ); 

This function looks up the requested URL and, if found, updates -bytesp and 
•datapp with the length and pointer to the start of raw data in the file. (Note that the 
data is compressed if compression is enabled). Since EmWeb employs a proprietary 
compression technique, the application should specifically disable compression of 
files it wishes to access this way by using the nocompress attribute in the appropriate 
_access file (see 3.4. ^ACCESS Files, page 22). This function returns ews status ok 
on success, or ews_s tatus_not_found on failure. 

4.1 A Authentication and Security 

HTTP Authorization techniques are discussed in the HTTP specifications (see 7. 
References, page 87). Knowledge of these principles is essential for correct use of 
these authorization interfaces. 

One or more HTML documents can be associated with a single "realm". A realm is a 
case-sensitive ASCII string that defines a "protection space" for the associated 
document(s). 

Each realm may have zero or more authentication entries associated with It. If a realm 
has no authentication entries, then documents in that realm -are not accessible. 
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ewsAuthMaxScheme /• count of supported schemes */ 

} EvsAuthSchezne; 

/* 

* this structure defines parameters for all the supported 

* authorization types. Hew parameters will be added in 

* to this structure in the future 
*/ 

typedef union 
{ 

#ifdef E W_CONFI G_OPTI ON_AUTH_BAS 1 C 
struct 

{ 

char *userName; 
char * password; 
} basic; 

tfendif /* EW_CONFIG_OPTION_AUTH_BASIC */ 
#ifdef EW_CONFIG_OPTION_ADTH_DIGEST 

• struct 

{ 

char *userName; 
char * pass Word; 

* ifdef EW_CONFIG_OPTiON_AUTH_DIGEST_M 

boolean digestRequired; /* require message data verification •/ 

# endif /* EW_C02*FIGJ)PTI0N_AUTH_DIGEST M */ 
} digest; ----- - 

#endif /« EW_CONTTC_OPTION_AOTH_DIGEST */ 

char reservedl; " 
) EwsAuthParameters; 

/• 

* This structure represents a single authorization entry. 
*/ 

typedef struct 
{ 

EvsAuthScheme scheme; 
EwsAuthParameters params; 

EwaAuthUandle handle; /• user defined •/ 
} EvsAuthorization; 

An authorization entry may be created by invoking the following function: 

EvsAuthHandle ewsAuthRegister 

( const char *realm, const EvsAuthorization ^authorization ); 

This function returns an EmWeb/Server authorization handle which corresponds to the 
authorization entry, or ews_auth_haotle_null on failure. The entry contains the triplet 
(authorization scheme (e.g. basic cookie), scheme-specific parameters (e.g. user and 
password), application-specific authorization handle). 

The application-specific authorization handle corresponding to the authentication 
validating a particular HTTP request is available from the context as follows: 
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A client that attempts to access a document associated with a non-null realm is 
required to authenticate itself. To authenticate, the client must send authentication 
parameters valid for at least one authentication entry for that document's realm. 
Clients that do not authenticate are denied access to the requested document. 

For example, assume a realm exists called n foo\ It has three authentication entries 
associated with It (two using the "basic cookie' 1 scheme defined in the HTTP/1.0 
specification, and one using the "digest" scheme defined in the HTTP/1.1 
specification): 

REALM: "foo" 

Au Chen ci cation Encry l: 
Type: •basic M 

parameters : Usexname- "userl " 
Password-**gues t" 
EwaAuthHandle: application* s entryl identifier > 

Authentication Entry 2: 
Type: "digest" f 
parameters: User name- M user2 M 

Password* "8371 8U9- 

Diges tRequi red -FALSE 
EwaAuthHandle : <application*s entry2 identified 

Authentication Entry 3: 
Type: "basic 

parameters: Username- "Sinclair" 

Password- "baby Ion" 
EwaAuthHandle: application's entry3 identified 

When a client attempts to access a document associated with realm "too", rt needs to 
authenticate against one of the above entries. Which one the client authenticates 
against is at its discretion. 

When a client does authenticate against one of the above entries, the EwaAuthHandle 
for that entry is stored in the current context for the HTTP request (Ewscontext). The 
datatype of this EwaAuthHandle is implementation-defined. 

The following types are defined for the authorization application interface (from src/ 

include/ews_auth.h) : 
/* 

* Defines the authorization schemes supported by the EmWeb server. 

• New schemes will be added as they are supported. 
*/ 

typedef enum 
{ 

ewsAuthSchemeBasic, 
ew&AuthSchemeDigest, 
ewsAu thSchemeManua IBas i c , 
ewsAuthSchemeManualDigest, 
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EwaAuthHandle ewsContextAuthHandle ( EvsConcext context ) ; 

The application may remove a previously registered authorization handle by invoking 
the following function: 

EvsStatus evsAuthRemove ( EvsAuthHandle authorization ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is returned 
(there are presently no conditions that result in error). 

By default, documents assigned to a non-null realm are protected and may only be 
accessed by authorized users. It may be desirable to enable or disable a realm's 
access controls. The following function disables access control for a realm making 
documents assigned to the realm accessible to everyone. 

EvsStatus ewsAuthRealmDi sable ( const char * realm ) ; 

This function returns ews_status_ok on success, or ews_status_bad_realm if the realm 
was not defined by any loaded archives. 

The following function enables access control for a realm making documents assigned 
to the realm protected. Protected documents may only be accessed by authorized 
users. 

EvsStatus evsAuthRealmEnable ( const char * realm ) ; 

This function returns ews_status_ok on success, or ews_status_bad_realm if the realm 
was not defined by any loaded archives. 

The following function (or macro) must be provided by the application. The function is 
invoked by EmWeb/Server to get a realm qualifier string from the application. The 
qualifier string is concatenated with the base realm name in authentication protocol 
messages such that browsers may differentiate between realms of the same name 
appearing in multiple servers. 

const char *evaAuthRealmQualifiei ( void ); 

The application would typically return the string "©hostname", where hostname is the 
server's local host name or IP address. The application may return null if no qualifier 
is desired. 

4.1 A1. Basic Authentication 

The Basic authentication scheme requires the browser client to transmit a Base64 
encoded usemame and password to the server for authentication. While no less 
secure than SNMP v1 , Basic authentication is vulnerable to network monitoring and 
replay attacks. 

The authentication parameters for Basic authentication are simply the usemame and 
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password represented as null-terminated character strings. 
4.1 A2. Manual Basic Authentication 

For some applications, it may be impossible to obtain the Basic authentication 
usemame/password pair prior to receiving requests for a document. Instead, the 
Basic authentication username/password may be stored in a remote secure 
database. This database would need to be queried for the usemame/password as 
each request requiring authentication is processed. 

in order to support this, a special type of authentication scheme is defined: 
ewsAuthschemeManuaiBasic. This scheme is available only If the build option 
ew_config_option_auth_mbasic is defined. Once defined, the application must 
provide the following interface: 



boolean ewaAuthcheckBasic (Ews Con text context 

, const char *realm 
, const char •basiccooicie 
.const char *usexName 
, const chax ^password J; 

The ewsAuthschemeManuaiBasic scheme can be registered for any realm by using 
the ewsAuthRegister function. The scheme field of the EvsAuthorization parameter 
must be set to ewsAuthschemeManuaiBasic, and the application handle can be set in 
the handle field. The params field is not used by the manual basic scheme. Manual 
basic can only be registered once per realm. If there are *non-manuaI B 
(ewsAuthschemeBasic) Basic authorization entries registered to the same realm as a 
manual Basic entry, the "non-manual" authorization entries will be given preference. 
If no "non-manual" authorization entries match the request, then ewaAuthcheckBasic 
will be called. 

The EmWeb/Server will invoke the application's ewaAuthcheckBasic function when 
authenticating a request for a realm protected by the manual basic scheme, unless 
a "non-manual" basic authorization entry matched. The application's 
ewaAuthcheckBasic function must now determine whether or not the authorization is 
valid. This function is passed the context, requested document's realm, and the 
base64-encoded basic cookie from the Authorization header (as specified in RFC 
2068). If the build option ew_confic_option_auth_mb^ic_decode is defined, then 
useiName and password will point to the usemame/password strings decoded from 
the basiccookie, otherwise these pointers are null. All strings are null terminated, 
and should not be modified by the application. 

The return value from ewaAuthcheckBasic determines how the server will respond to 
the request. If false is returned, access will be denied. If true is returned, access 
will be granted . 

Optionally, the application can suspend the context, from within ewaAuthcheckBasic 
using ewssuspend. EmWeb/Server will ignore the return value in this case. When the 
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context is later resumed by wsResume, the evaAuthcheckBasic function will be 
reinvoked by EmWeb/Server. 

The application may abort the context from within evaAutncneckBasic by calling 

ewsNe tHTTPAbor t. 

4.1.4.3. Digest Authentication 

The Digest authentication scheme challenges the browser client using a "nonce" 
value. The client responds with a valid oyptographic checksum of the usemame, 
secret password, the given nonce value, the HTTP request method, and the 
requested URI. This avoids sending the secret password over the network. 
Furthermore, by generating unique nonce values, the server can make replay and 
other forms of attack impractical. 

Note: EmWeb's digest authentication support is derived from 
the RSA Data Security, Inc. MD5 Message-Digest Algorithm. 

Note: Digest authentication is currently an internet proposed 
standard and is not yet supported by many browsers. 

The authentication parameters for Digest authentication include the usemame and 
password represented as null-terminated character strings. In addition, one 
additional boolean parameter is defined as follows: 

digestRequired 

If true, the EmWeb/Server will require that the client provide a valid 
message digest to prevent forgery of the request message. This requires 
significantly more computation and is not supported by most browsers. 

The application is required to define the application-specific structure called 
EwaAuthwonce. The EwaAuthNonce structure is application-specific and contains 
parameters to be used in calculating (via MD5 hash of the structure's contents) a 
unique nonce value. We recommend including the clients IP address, timestamp, a 
server-wide secret key, and any other random bits the application desires. 

Two additional functions must be provided by the application for the generation and 
verification of nonce values as follows: 

First, the evaAuthwoncecreate o function is called by EmWeb/Server in response to 
an unauthenticated request for a document to request that the application initialize 
the EwaAuthNonce structure. 

void 

evaAuthNonceCreate 



(EvsContext context 
, const char •realm 
.EwaAuthNonce *noncep ); 
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The application should initialize the EwaAuthNonce structure. The request context 
and realm are provided as inputs. For example, a typical application could read the 
application-specific network handle from the request context to determine the client's 
IP address. 

Second, the ewaAuthnoncecheck ( ) function is called by EmWeb/Server in response 
to a client's request to authenticate against a nonce value previously initialized by 

the application in evaAuthNonceCxeateO . 

typedef enum EwaAuthNonceStatus e 

{ 

evaAuthNonceOK, /* nonce value valid fox request •/ 
evaAuthNoncetastOK, /• nonce value valid, but won't be again •/ 
evaAuthNonceStale. /* nonce value is stale, generate new nonce */ 
ewaAuthNonceDenied /* nonce value is invalid */ 
} EwaAuthNonceStatus; 

EwaAu thNonceS tatus 
e waAu thNonceCheck 

(Evscontext context ■ 

* const char * realm 

, EwaAuthNonce *noncep,uintf count.) ; 

This function is called by EmWeb/Server to verify that the nonce is valid for the 
current request. The count parameter indicates the number of times this nonce has 
been used previously (i.e. zero on the first call). The application may decide to 
accept the nonce by returning evaAuthNonceox or evaAuth*onceLastoK. The 
evaAuthNonceLastox is used to signal to the server that the nonce value is valid this 
time, but will not be valid if used again. The server uses this information to generate 
a new nonce and pass a next nonce value to the browser to be used on the next 
request. Otherwise, the application may decide to expire the nonce (because it has 
been used too many times, because too much time has gone by since it was created 
or any other reason that the application decides) by returning evaAu thwonces ta ie or 
refuse to authenticate (because the client IP address doesn't match) by returning 

ewaAuthNonceDenied. 

4.1.4,4. Manual Digest Authentication 

For some applications, it may be impossible to obtain the digest authentication 
username/password pairs prior to receiving requests for a document. Instead the 
digest authentication username/password may be stored on a remote server This 
server would heed to be queried for the username/password as each request 
requiring authentication is processed. 

In order to support this, a special type of authentication scheme is defined: 
evsAuthschemeManuaiDigest. This scheme is available only If the build option 
Ew^coNnc^PTioN^AtrrH.MDicEST is defined. Once defined, the application must 
provide the following interface: 
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boolean evaAuthcneckDigest < EvsContext context 

.const char "realm 
, const EvaAuthNonce *noncep 
.const char •userName 
rconst char ••digest }; 

The ewsAuthschemeManuaiDigest scheme can be registered for any realm by using 
the ewsAuthRegister function. The scheme field of the EvsAuthorization parameter 
must be set to ewsAuthschemeManuaiDigest, and the application handle can be set in 
the handle field. The params.digest.digestRequired flag may be used if the 
Ew__coNFiG_opTioN_AtrrH_DiGEST_M build option is defined. All other parameters are 
not used by the manual digest scheme. Manual digest can be registered once per 
realm. If there are "non-manual" (evsAuthscnemeDigest) digest authorization entries 
registered to the same realm as a manual digest entry, the "non-manual" 
authorization entries will be given preference. If no "non-manual" authorization 
entries match the request, then evaAuthcneckDigest will be called. 

The EmWeb/Server will invoke the application's evaAuthcneckDigest function when 
authenticating a request for a realm protected by the manual digest scheme, unless 
a "non-manual" digest authorization entry matched. The application's 
evaAuthcneckDigest function must now determine whether or not the authorization 
is valid. This function is passed the context, the requested document's realm, the 
nonce associated with this request, and the usemame as it appears in the request 
AH strings are null terminated, and should not be modified by the application. 

evaAuthcneckDigest returns a boolean status that determines how the server will 
respond to the request If false is returned, access will be denied. If true is returned, 
the ^digest parameter has been set to a null terminated string containing the ASCII 
string representation of the MD5 checksum of the usemame, realm, and password 
strings. This is referred to the H(A1) value in RFC 2069. For example, if the 
username is "user*, password is "password", realm is •foo_realm", then -digest 
should be set to the string representation of MD5( usenfoo_realm:password ), which 
would be: 

•digest ■ "eafd9339d0ll4895926c24ec79af72ll M 

The ^digest value is used by the server to validate the response digest and entity- 
digest that are present in the request's Authorization header. If the validation does 
not pass, access will be denied. The memory used by the -digest value will remain 
referenced by the server until the context of the request is freed. 

Optionally, the application can suspend the context from within evaAuthcneckDigest 
using evssuspend. The return value will be. ignored. When the context Is later 
resumed with evsResume, the evaAuthcneckDigest function will be re invoked. 

The application may abort the context from within evaAuthcneckDigest by calling 
evsNetHTTPAbort. 
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4.1 AS. Application Security Verification 

Some applications may provide their own proprietary form of client authentication. 
These proprietary methods will vary from application to application. For example, an 
application could use the client's IP address to restrict the client's access to certain 
realms. 



EmWeb provides a generic interface that allows an application to provide any 
proprietary checks on the request context and requested, realm. This interface 
allows the application to deny service to the client if so desired. 

This interface is made available by defining the fw_conkig option auth verify 
build option. The application must then provide the following interface? 



boolean evaAuthveiifysecuiity ( EwsContext context 

, const chai *xealm >; 

This function is called by EmWeb/Server after the current request has passed the 
standard authorization procedures described above. For example, if basic 
authentication is enabled on a realm, evaAuthverif ysecuri ty will be called only after 
the basic authentication successfully completes. If digest authentication is used, 
then evaAuthverif ysecuxity is called after the response digest is successfully 
verified, but before the entity-digest is checked (if the 
ew_configj3ption_aoth_digest_m build option is turned on). 

evaAuthveiifysecuiity is passed the current context, and a pointer to a null 
terminated string containing the realm. The application can allow the request to 

Complete by returning TRUE from evaAuthVerifySecuii ty. If evaAuthveiifysecuiity 

returns false, the request is denied access. 

evaAuthveiifysecuiity is provided only as a secondary security mechanism and 
can only be used in conjunction with a defined standard security scheme such as 
basic or digest. 

Optionally, the application can suspend the context from within 
evaAuthvexifysecurity using evssuspend. The return value will be ignored. When 
the context is later resumed, the evaAuthveiifysecuiity function will be reinvoked. 

The application may abort the context from within evaAuthveiifysecuiity bvcallina 
ewsNetHTTPAbort. y 

4.1 .4.6. Document Realm Assignment 

The authentication realm of a document is typically determined from the access 
configuration files by the Em Web/Compiler. However, It may be desirable to change 
the documents realm assignment at run-time. The following function is optionally 
provided by the EmWeb/Server to the application for this purpose: 

EvsStatus evsDocumentSetRealm ( const chai «uil, const chai *xealm ); 
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This function returns' ews_status_ok on success, or ews_statusj«ot found if the 
specified local URL is not installed, or ews_status_no resources If insufficient 
resources were available to create a new realm. 

4.1.5. Request Context Access 

Each HTTP request received by the EmWeb/Server is assigned a unique context. A 
context handle of type Evscontext is first returned to the application from the 

evsNetHTTPStart function. 

Application code responsible for the run-time content of HTML documents (Le. C code 
fragments from <ekweb_string> and <emweb_include>, HTML form processing 
functions ewaFoxmserve_* and ewa Forms u bin i t_* , and raw CGI interface functions 
evaCGistart_« and ewacciDaca_») have access to the corresponding HTTP request 
context. In the case of <emweb_string> and <emwebjcnclude> C code fragments, the 
context is available from the local variable symbol evscontext. In the case of the form 
and raw CGI processing functions, the context is passed as a parameter. 

Several context access functions are defined which can be called by the application to 
extract information about the current context. For example, the function; 

EvaNetHandle evsContextNetHandle { EvsContexc context ) 

Returns the network handle corresponding to the HTTP context that was passed by 
the application to the EmWeb/Server in the evsNetHrrpstait function. The following 
table lists these context access functions: 



Context Access Function 


Description 


ewsContextNetHandle 

ewsContextNetHandle ( Evscontext context ) ; 


Returns the network handle that 
was passed by the application to 
EmWeb/Server in the evsuetHrrp- 
start function. 


EwaDocumentKandle 
ewsContextDocumentHandle 
( Evscontext context ) ; 


Returns the document handle that 
was passed by the application to 
EmWeb/Server in either the evs- 

DocumentRegistei Or evsDocument * 

clone functions, or 

EWAJX>CUMENTJiANDLE_NULL. 


EvaAuthHandle 

e vs Con tex tAu thHand le 

( Evscontext context ) ; 


Returns the authorization handle 
that was passed by the application 
to EmWeb/Server in the evsAu- 
thRegister function, or 
EWA_AUTH_HANDLE_NUU~ 
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Context Access Function 


Description 


boolean 

ewsContextlsResuming 
{ EwsContext context ) ; 


Returns true if this is the first appli- 
cation call-out after a suspended 
request was resumed by calling 
evsResume. Otherwise, returns 

FALSE. 


uint32 

ewsContextlterations 
( EwsContext context ) ; 


Returns the iteration count (start- 
ing with zero) to an 

<EMWEB_STRING> Or 

<emweb_include> C code fragment 
with the emweb_it£rat£ attribute 
specified. 


uintf 

ewsContextDa te ( EwsContext context, 
chai *datap, uintf length ) ; 


Copies the HTTP Date : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextPragma ( EwsContext context, 
chai "da tap, uintf length ); 


Copies the HTTP pragma : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextFrom ( EwsContext context, 
chai * da tap, uintf length ) ; 


Copies the HTTP From: header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsCon textl f Modi f i edSince 

{ EwsContext context, chai * da tap, uintf 

length J ; 


Copies the HTTP if -modified- 
since : header into the buffer pro- 
vided by the application and 
returns the actual number of bytes 
present. 


uintf 

ewsContextRef erer ( EwsContext context, 
chai * da tap, uintf length ); 


Copies the HTTP Ref erer : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextUser Agent ( EwsContext context, 
char » da tap, uintf length ); 


Copies the HTTP User -agent: 

value into the buffer provided by 
the application and returns the 
actual number of bytes present. 
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Context Access Function 


Description 


UlltWi. 

evsContextHost { EwsContext context, chai 
•datap, uintf length ); 


uopies tne http Host: value into 
the buffer provided by the applica- 
tion and returns the actual number 
of bytes present. 


uintf 

evsCGIServexProtocol ( EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP server protocol 
"http/i . o" or "http/o . 9 n into the 
buffer provided by the application 
and returns the actual number of 

bvtes nresent 


uintf 

evsCGIReguestMethod( EwsContext context, 
chai * da cap, uintf length ) ; 


Copies the HTTP request method 
"get 0 , "head", or "post" into the 
buffer provided by the application 
and returns the actual number of 
bytes present. 


const char * 


Returns pointer to CGI extra path 
information if present, or NULL 


const char • 

ewsCGIScriptName( EwsContext context ); 


Returns pointer to URL base path 
string. 


uintf 

evsCGIQueryStxingf EwsContext context, char 
•datap, uintf length ); 


Copies the URL query string into 
the buffer provided by the applica- 
tion and returns the actual number 
of bytes present 


uintf 

ewsCGIContentType( EwsContext context, char 
* da cap, uintf length ); 


Copies the HTTP Content - type: 

value into the buffer provided by 
the application and returns the 
aciuai numoer oi bytes present 


uintf 

ewsCGIContentLength ( EwsContext context ); 


Returns the value of the HTTP 
content • length ; header or zero if 
not present 


uintf 

ewsCGIContentEncodingC EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP Content- encod- 
ing : value into the buffer provided 
by the application and returns the 
actual number of bytes present 



Note that the context access functions that copy values into application-provided 
strings return the actual number of bytes in the value. If the value is not present, then 
these functions return zero. These functions do not overwrite the application buffer 
(i.e. the length parameter shall be honored by EmWeb/Server). However, the function 
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may return a number greater than the length if the application buffer was not large 
enough to accommodate the value. In fact, the length parameter of zero may be used 
to determine the size of the buffer needed. 

4.1.6. Raw CGI 

We believe that one of the greatest features of EmWeb/Server is that the system 
integrator can implement nearly any embedded Web-based application without using 
CGI. 

While Agranat Systems strongly discourages its use, we recognize that some highly 
sophisticated applications may require a raw CGI interface, and so we provide one. 

A URL corresponding to the base name of a CGI script may be specified in the access 
file which is processed by the EmWeb/Compiler. The application must provide two 
functions for each CGI script with names derived from the value of the cgi -symbol 
directive in the _access file as follows: 

EwaCGIHandle evaCGIStait_sy/nbcJ ( EwsContext context ) ; 

This function is called by EmWeb/Server when a CGI script is first requested by a Web 
server. The application returns a handle that is passed back to the application in the 
second function: 



void evaCGIData_sy/nbcJ ( EwaCGIHandle handle, EwaNetBuf f ei buffer ); 

This second function is called by EmWeb/Server to pass one or more buffers to the 
application containing raw CGI data (i.e. the HTTP message body) as they are 
received from the network. The application is responsible for knowing where the end 
of data is from the content - length: header (available from ewsCGicontenttength). 

Restriction: The application's evaCCIData_symboi function 

must not attempt to access request headeMnformation from 
the request context because the network buffer(s) containing 
request headers may have been discarded. Any information 
needed by the application should be copied and saved during 

ewa CGI Star tjsywbo 1 . 

The application may generate a standardized HTTP response header by invoking the 
following function: 

EvsStatus evsCGI Sends tatus 
{ EwsContext context, const char * status, const char •stxing) ; 

This function sends an HTTP status line for the appropriate HTTP version. The status 
argument must contain a null-terminated character string containing a three-digit 
HTTP status code followed optionally by descriptive status text. If not NULL, the string 
argument contains a null-terminated character string containing additional headers, 
and/or data. This function returns ews_status_ox on success. Otherwise, an error 
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code (ews_status_bad_state or ews_status_no_resources) is returned. Note that if 
evsCGisendstatus is to be used, It must be used only once per request, and must be 
used before calling evscGXData . 

For example, to send a simple HTML page: 

evsCGISendStatus ( context, "200 OK", 
-Content -Type: text/hanl\r\n" 
"Content -Length: 66\r\n" 
"\r\n M 

- <HEAD> <TITLE > Exampl e< /TITLE > </HEAD>" 
"<BODY>This is an example </BODY>" ); 

The application may send additional headers followed by a message body by invoking 
the following function: 

EwsStatus ewsCGIData ( EwsContext context, EwaNetBuffei buffer J ; 

This function sends the chain of buffers to the Web browser. Note that the application 
must delimit the header and body sections with a blank line sequence in accordance 
with the HTTP specification. To complete the request, the application should invoke 
this function with an ewa_netjbuffer_null buffer descriptor. This causes EmWeb/ 
Server to close the connection. This function returns ews_status_ok on success. 
Otherwise, an error code (ews_status_bad_state) is returned. 

Instead of sending headers and data, the application may instruct EmWeb/Server to 
generate a redirect to a specified URL or, if local, serve a local document as a 
response. To send a redirect response to the browser (for a local or remote document) 
the application may invoke the following function: 

EwsStatus evsCGIRediiect ( EwsContext context, const chai • uil ); 

To serve a local document as a response, the application may invoke the following 
function: 

EwsStatus ewsContextSendReply { EwsContext context, char * uil ) ; 

Note that these functions may not be used in conjunction with ewscciData or 
ewsccisendstatus. The uri parameter may be a relative or absolute URL 

Several CGI environment values are available from the HTTP request context as 
outlined in the Context section above. In addition, the following two functions return 
global server information for conformance with CGI/1.0: 

const char * ewsCGIServer Software ( void ) 

Returns the server software version string, for example °Agranat-Emweb/Ri_o , \ 
const char * ewsCGXGatewaylnterface ( void ) 
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ews_log_status_no_resources , 
ews~log~statusjenternal_error 



/* 500 insufficient reso 
/* 500 internal eixox •/ 



} EvsLogStatus; 



4.1.8. Local Filesystem Interfaces 

The EmWeb Server provides the ability to manage a filesystem on the serving system. 
The Server supports: 

- uploading a file from a client (browser) to the server 

- serving the contents of a file in response to a URL GET 

In both cases, the filesystem is external to the EmWeb Server. EmWeb assumes 
nothing about the implementation of this filesystem; it can exist on a local disk, non- 
volatile memory, or on an external proxy. All EmWeb requires is the ability to: 

- retrieve/set meta-information about the file (e.g., type, size, modification time, etc.). 

- open a file 

- read a number of bytes from a existing file 

- write a number of bytes to a newly created file 

- close a file. 

The API that must be supplied to EmWeb to provide these functions is defined below. 
To enable the basic file support, define the preprocessor symbol 

EW_cONFIG_OPTION_FILE in ew_config.h. 

4.1.8.1. The EwsFHeParams structure 

The EvsFiieParams structure Is defined in the evs_sys .n include file. It is used by the 
EmWeb server to associate meta-information with a local file. The EvsFiieParams 
structure consists of a union of two substructures. These substructures correspond 
to the file function that EmWeb is to perform. The fiieFieid structure is used when 
the browser is uploading a file to the server via a form post (see RFC1B67). The 
f ileinfo structure is used to serve a file in response to a get for a particular URL 
The individual fields for each of these structures is described in the description 
associated file operation. 

typedef union EvsFiieParams s 

{ 

/* 

* fiieFieid ■ for support of the form INPUT TYPE* FILE field. 

* The server fills out this structure, and passes it to 

* the application when th fil is submitted 
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Returns the gateway interface version string, for example "cgi/i . o n . 
4.1.7. Logging Hook 

The application may optionally provide the following function (or macro) for logging 
HTTP events: 

void evaLogHook (EvsContext context, Evs Log Status status) ; 

This function is invoked by Em Web/Server at least once for each HTTP request, and 
possibly a second time for certain dispositions after a successful request. Possible 
status values include (from sr c/inciude/evs_def . h) : 

typedef enum EvsLogStatus_e 



{ 



* 200 Request accepted 



EWS LOG STATUS OK, 



Request dispositions (after successful request) 



EWS_L0G_STATUS_K0_C0NTE1IT , 

ewf_log_status^m0ved_permanently , 
ews_log~status 2moved_temporarily , 
ews2log_status_see_other , 
ews log status not modified, 



/* 204 no-op form or ima 
/« 301 link */ 
/• 302 redirect •/ 
/* 3 03 see other •/ 

/• 304 not modified sine 



* 4 01 Unauthorized 



ews_l0g_statu5_au7h_failed , 
ews_log~status~autiTforgery , 
ews_log~status_auth~s tale , 
ews~log~status~auth~required , 
ews3-ogJstatus"auth"dioest_reouired , 



/* authorization failed 
/* bad message checksum 
/* authorization nonce s 
/* authorization not pie 
/♦ message digest not pi 



* 400 Bad Request 
V 

ews_ux3_statos_bad_requ£st , 
ewsJlocJstatus_bad_form , 
ews~log"status~bad imagemap, 



/* HTTP parse error •/ 
/* form data parse error 
/* imagemap query parse 



• Additional errors 



ews_log_status_not_found , . 
ewsJlogjstatos3*cthod_not_allovtcd , 
ews^log^status^lengtk^reouired , 
e ws~log~ status~unavai lable , 
ews_log~status2not_impi^mented , 



/• 4 04 not found or hidd 

/• 405 method not allove 

/* 411 length required * 

/* 503 aborted Document 

/* 501 bad method for UR 
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•/ 

ifd f EW_CONFIG_0PTI0N_FIELDTYPE_FILE 

struct 

{ 

const char *fileName; /* file name or NULL */ 

const char *contentType; /• MIME type */ 
const char •contentEncoding; /* content encoding or NULL */ 
const char *contentDisposition; /* Content •disposition: */ 
int32 contentLength; /* length or Ews CONTENT LENGTH UNKNOWN */ 

} fileField; 
# endif /* EW_CONFIG_OPTION_FIELDTYPE FILE •/ 



h 

* filelnfo - for support for local file operations (GET, HEAD, OPTIONS, 

* PUT, DELETE) . This structure is setup by the application when a URL 

* that corresponds to a local file is received. This structure 

* gives the server all it needs to know to handle the file operation. 
•/ 

* if defined ( EW_C0NFIG_OFTI0N_FILE_GET ) 
struct 
{ 

EwaFileName fileName; /• file name (opaque) */ 

const char *contentType; /* MIME type */ 

const char * contentEncoding; /* content encoding or NULL */ 

const char •contentLanguage; /• content language or NULL •/ 

const char *eTag; /* HTTP/1. a cachability tag, or NULL •/ 

const char *lastModified; /* modification time (RFC1123) or NULL */ 

const char *lastModif iedl036 ; /• modification time (RFC1036) or NULL */ 

const char * realm; /* auth realm 01 NULL */ 

int32 contentLength; /• length or Ews_CONTENT_LENGTH_UNKNOKN •/ 

EwsRequestMethod allow; /* allowed methods •/ 

/* HEAD & OPTION _alvays_ allowed by default */ 

) filelnfo; 

char reservedl; 

} EwsFileParams, •EvsFilePaxamsP; 

4.1.8.2. File Upload 

Support for File Upload is enabled In the EmWeb server by defining the preprocessor 
symbol ew_confi g_opti on_fie ldtype_fi le in ev_config.h. 

To support file upload, EmWeb supports the methods described in RFC1867 (Form- 
based File Upload in HTML). At the time of this writing, only Netscape Navigator 
implements this RFC. For more information about RFC1867 and file upload 
support, contact Agranat Systems. 

RFC1 867 describes a new form input field of type-file. This form field results in an 
input field that allows a user to enter a filename. This filename is the name of a file 
that is accessible by the browser. On submission of this form, the browser reads the 
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file, and sends the file's contents to server as part of the post request. 
This file field takes the following form: 

<INPUT TYPE-FILE NAME-name VALUE-value> 



Where name is the name of the form field and value is the default filename to display 
in the form when it is first served. When the Em Web/Compiler encounters one of 
these form fields, the following form structure fields are generated: 

char *nan?e; 
EwaFi leHandle na/ne_handle; 

The name field is used by the form serve function only. It allows the application to 
override the default file name given when the form is first displayed (note: some 
browsers do not support a default value - call Agranat Systems for more information). 
The na/nejiandie field is used by the form submit function only. It provides the file 
handle for the submitted file (see the discussion of evaFiiePost below). The status 
for namejiandie is set to (ew_form_returned i ew_form_dynamic) on successful file 
post, else ew_form_file_error. 

When EmWeb receives the submitted file, it allocates an EvsFiiePaiams structure 
and initializes the t iieFieid substructure. The U lerieid substructure is setup using 
the optional file headers that are sent along with the file. The fiieFieid fields are: 

fileNarne 

Null terminated string containing the name of the file. This is usually 
supplied as the basename of the file (no path information). This field will be 
a null pointer if the browser does not supply a filename. 

contentType 

Null terminated string containing the value of the content -Type header, or 
a null pointer if the concent -Type header is not present (assumed to be 
text/plain). 

contentEncoding 

Null terminated string containing the value of the content -Encoding header, 
or a null pointer if the content-Encoding header is not present. 

contentDisposition 

Null terminated string containing the value of the content-Disposition 
header, or a null pointer if the content -Disposition header is not present. 

contentLength 

set to the number of bytes in the file to be posted. If the content -Length 
header Is not supplied by the browser, then this field will be set to 
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£ WS_CONTENT_LEHGTH_UNKNOWN . 

As soon as EmWeb receives the submitted form containing an ikput type-file field 
with file content, prior to calling the application's submit function, a call will be made 
to the application interface ewaFilePost: 

EwaFileHandle ewaFilePost ( 
EwsContext context, 
const EvsFileParams *paxa&s ); 

This function is provided by the application. The application defines the appropriate 
type for EwaFileHandle, and the value for ewa_fi le_handle_null, which indicates a 
null EwaFileHandle. The paiams parameter is initialized by EmWeb as described 
above, and released by EmWeb on return from ewaFilePost. 

ewaFilePost should open a file, and return a EwaFileHandle value that uniquely 
identifies that file. On error, ewaFilePost can return ewa_file_k.-jjdle_null, which 
will cause EmWeb to discard the contents of the submitted file without discarding the 
other submitted form fields. The application can also call evssuspend to suspend the 
current context. In this case, ewaFilePost will be reinvoked (with 

ewsContextlsResuming (context) •« TRUE) Once the application calls evsResume on 

the context. The request can be aborted and the connection closed if ewaFilePost 

invokes ewsNetHTTPAboit. 

After ewaFilePost is called, EmWeb will start calling the file write routine: 

sintf ewaFileWrite( EwsContext context. 

EwaFileHandle handle, 
const uints » da tap, 
uintf length ) ; 

handle is set to the value that was returned by the ewaFilePost call, da tap is a 
pointer to the data to be written, and length is set to the number of bytes that can be 
written from da tap. ewaFiiewiite returns the number of bytes written, or < o if an 
error occurred. If < o is returned, EmWeb will discard the rest of the incoming file 
without discarding the other submitted form fields. The application can suspend the 
current context by calling ewssuspend from within ewaFiiewiite and returning the 
number of bytes written prior to suspending (can be zero). The application can then 
resume the context by calling ewsResume. This will cause ©waFiiewrite to be 

reinvoked With ewsContextlsResuming ( context ) ■ ■ TRUE and da tap and length 

adjusted by the number returned by the suspended call to evsFiiewiite. The 
application can also call ewsNetHTTPAboit to abort the entire request, and close the 
connection. 

After the entire file has been received and written, the application's form submit 
function will be called. If the status field has been set to ew_form_?.eturned r then the 
nan>e_handie contains the file handle for the file as returned by ewaFilePost. It is the 
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responsibility of the form submit function to close the file at this point. 

Note well that once a file handle is returned by ewaFiiepost, it is the responsibility of 
the application to close that file handle during the form submit function. EmWeb/ 
Server will close ihe file handle if the request is aborted prior to calling the submit 

4.1.8.3. File Serve 

The EmWeb Server allows an application to provide a file external to an EmWeb 
archive for the response to a get request This functionality is enabled by defining 
the preprocessor symbol ew_config_oftion_file_get in ev_config.h. 

To serve a file, an application must "mark" a get request URL as representing a non- 
archive file. Once this is done, the EmWeb Server will "open" this file, read data from 
it and serve this data in response to the URL get. After all data is served, EmWeb 
Server will close the file. 

To "mark" a URL as a local file, the application calls the server interface 
evscontexcsetFile during a URL get: 



Ews Status ewsContextSetFile ( Ew's Con text context, 

EwsFileParamsP paxams ) ; 

ewscontextsetFile can be called from: 

- evauRLHoo* once the URL is determined to be a local file entity. 

- an application's form submit function prior to calling ewscontextsendRepiy. In this 
case, the URL passed to evscontextsendRepiy represents the local file to be served. 

Note that both the ewaURLHook and an application's form submit function can suspend 
the current context using evssuspend. This allows the application to do any 
asynchronous tasks needed prior to calling ewscontextsetFile. 

The f iieinf o substructure of the paiam parameter must be set up by the application 
prior to calling ewscontextsetFile. This structure gives EmWeb Server all the 
information about the file It needs in order to serve the file as response content. The 
fields are described below: 

EwaFileName fileName 

This field Is for use only by the application, EmWeb Server ignores this field. 
The type EwaFileName must be specified by the application. 

contentType 

set to a null terminated string containing the value for the con tent -Type 
header that is to be sent with the file. 
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contentEncoding 

set to a null terminated string containing the value for the content - 
Encoding header that is sent with the file. If a null pointer, no content- 
Encoding header is sent. 

contentLanguage 

set to a null terminated string containing the value for the content- 
Language header that is sent with the file. If a null pointer, no content- 
Language header is sent 

eTag 

reserved, must be set to null. 
lastModified 

the last modification date of the file in RFC! 1 23 format as a null terminated 
string. If null, ft is assumed that the file should be served each time it is 
requested. 

lastModified1036 

the last modification date of the file in RFC1 036 format as a null terminated 
string. Some browsers cannot correctly recognize the RFC1 123 format, so 
this field should be set in addition to the lastModified field. Call Agranat 
Systems for more information. 

realm 

the realm the request should be authenticated against for this file as a null 
terminated string, else null if no authorization required. Authorization is 
only checked when the file is served as a result of calling ewsContextSetRle 
from ewaURLHook - the realm used to protect the form submission is used 
implicitly when serving the file as a result of a ewsContextSendReply. 

contentLength 

Set to the number of bytes in the file, else ews content length unknown if 
the file's length is unknown. 

allow 

reserved, must be set to evsRequestMethodGet. 

EmWeb/Server references the paxam parameter for the duration of the file operation. 
As such, this parameter must be accessible throughout the life of the request • 
beyond the context of the evacontextse tFiie call. It can be safely deallocated by the 
application during the evaNetirrrpcieanup call. 

Once the URL has been 'marked" by the evscontextsetFiie call, EmWeb/Server 
will open the file using the evan lecet interface: 
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4.2. Application Interface Examples 

This section is intended to illustrate the use of application interface functions under 
various scenarios. 

The following tables illustrates the application interfaces used in the simplest ErnWeb/ 
Server configuration. 



App!ication->Server 
(Initialization) 


Server -> 
Application 


Description 


evslnit 


evaAlloc 


Application initializes EmWeb/Server. 
The server may allocate run-time 
memory resources. 


evsDocumentlnstallAi - 
chive 

evsAuthRegistex 


evaAlloc 


Application installs one or more docu- 
ment archives and registers zero or 
more authenticated users. The server 
allocates run-time memory resources 
for its internal databases. 



AppIication->Server 
(HTTP Transaction) 


Server -> 
Application 


Description 


evsNe tHTTPS tax t 


evaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


evsN e tHTTPRe cei ve 


evaAlloc 
evaNetBuff exFxee 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 
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EvaFil Handle evaFiieGet ( EvsContext context, 

const chai »uil, 
const EysFileParamsP params ) ; 

The uii parameter is the URL that was 'marked" as a file access, params is the 
EwsFiieParams structure that was passed to evscontextsetFiie. The application 
defines the appropriate type for EvaFiieHandie, and the value for 

EWA_FILEJiAOTLE_NULL, Which indicates a NULL EvaFiieHandie. 

evaFiieGet should open the file identified by params and uri, and return a 
EvaFiieHandie that uniquely represents the file. On error, evaFiieGet can return 
ewa_file_handle_null. This causes the connection to abort. If desired, the 
application can suspend the current context by calling evssuspend from within 
evaFiieGet. The context can be resumed at a later time by calling evsResume. 

evaFiieGet Will be rein VOked (With evsCon text I sResuming ( context ) «- TRUE). 

Once the file has been opened by evaFiieGet, Em Web/Server will read the file by 

calling evaFileRead: 

sincf evaFileReadf EvsContext context, 

EvaFiieHandie handle, 
uinte * da tap-, 
uintf length ) ; 



This function should copy up to length bytes into the area of memory starting at 
datap. handle is set to the file handle returned by evaFiieGet. On return, 
evaFileRead should return the number of bytes written into datap, which can be less 
than length. On error, < o should be returned (this causes the request to be aborted 
and the connection dose). This function can suspend by calling evssuspend and 
returning the number of bytes written into datap (can be zero). When the file 
described by handle has been completely read, this routine must return zero. 
Returning zero indicates that End-of-Fiie has been reached (except when 
evssuspend has been called prior to returning). 

Once all file data has been read, EmWeb/Server will close the file by calling 
ewaFileClose: 

void evaFileClose { EvaFiieHandie handle, EvsStatus status ) ; 



evaFileClose should dose the file assodated With handle (the EvsFileParams 

structure can be safely deallocated at this point), status will be set to ews status ox 
on successful completion of the file serve, otherwise It will be set to an error code. 
EmWeb/Server will call this function to dose a file handle during an aborted request 
prior to calling evaNetHTTPEnd. Note that this function does not support suspension. 
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Application->Server 
(HTTP Transaction) 


Server •> 
Application 


Description 


evsRun 


<emweb_string> 
<emweb~include> 

evaFormServe * 
evaFormSubini c_* 
evaCGIStart_* 
evaCGIData_* 


The server invokes the application 
code attached to the requested docu- 
ment in order to construct a response 
on-the-fly. 




ewaNe tBuf f ei Al - 
loc 

evaKe tHTTPSend 
<STAT0S_OK) 


The server allocates network buffers 
as needed, fills them with HTTP 
response data, and sends them to the 
application for transmission. 




evaFiee 

ewaNe tBuf feiFiee 
evaNetHTTPEnd 


The server releases any remaining 
resources associated with the HTTP 
transaction and terminates the 
request. The application closes the 
TCP connection at this point. 


The next table illustrates a typical HTTP transaction during which the application 
instructs the EmWeb/Server to yield control ol the CPU. 


AppIication->Server 
(Scheduling) 


Server -> 
Application 


Description 


evsNecHTTPStart 


eva Alloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


evsNetHTTPReceive 


eva Alloc 

evaNe tBuf fez Fx ee 


Application accepts request data from 
the network and passes It to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 


ewsRun 


<emweb_strinc> 
<emweb~include> 
evaFormServe_* 
evaFormSubmi t_« 


The server invokes the application 
code attached to the requested docu- 
ment. 
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Appticatiorv>Server 
(Scheduling) 


Server *> 
Application 


Description 


ews Suspend 




Thp aDolication susnends the reous&t 
Processing on the request stops until 
resumed. 


evsResume 


<EMWEB_STRING> 
< £MWEB_I N CLUDE > 
evaFormServe_* 
evaFormSubmi t_« 


The application resumes the request 
The server re-invokes the application 
code attached to the requested docu- 
ment in order to construct a response 
on-the-fly. 




ewaNetBuf feiAl- 
loc 

ewaNetHTTPSend 
( STATUS^ YIELD ) 


The server allocates and sends a 
response buffer. The application trans- 
mits the data and requests that the 
server yield the CPU. 


ewsRun 


evaNetBuf feiAl- 
loc 

ewaNetHTTPSend 
(STATUS_YIELD) 


The application reschedules the 
server. The server sends the next 
buffer. 


evsRun 


evaNe tBu f f ei Fx ee 

evaFxee — 
ewaNetHTTPEnd 


The application reschedules the 
server. The server releases resources 
and terminates processing of the 
request | 


The next table illustrates a typical scenario in which the application aborts processing of 
an incomplete HTTP request. 


Application->Server 
(Abort) 


Server -> 
Application 


Description 


evsNetHTTPStait 


evaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


ewsNetHTTPReceive 
* * * 


evaAlloc 

evaNetBuf fexFxee 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 
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Applicati n-> Server 
(Abort) 


Server *> 
Application 


Description 


evsNetHTTPAboi t 


evaFzee 

evaNetBuffeiFxee 
ewaNetHTTPEnd 


Application requests abort of HTTP 
transaction in progress. Server 
releases resources and terminates 
request. 


The next table illustrates the on-demand archive loading feature of ErnWeb. 


Application->Server 
(Demand Loading) 


Server -> 
Application 


Description 


ewsDocumentRegi seer 


evaAlloc . . . 


Application registers a URL with 
Em Web/Server that is not loadfid 


evsNetHTTPStaxt 


evaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


evsNetHTTPReceive 


evaAlloc 
evaNetBuf f exFree 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 




evaDocumentFault 


The server recognizes the requested 
URL to be a registered document and 
notifies the application. 


evsDocumentlnstallAx • 
chive 




The application loads the archive con- 
taining the document. 


evsRun 


<EMWEB_STRING> 
<EMWEB~INCLUD£> 
ewa Forms ex ve_* 
ewaFortnSubmi t_* 
evaCGIStaxt_* 
evaCGIData_* 


The server automatically continues 
processing the request once the docu- 
ment has been loaded. The server 
invokes the application code attached 
to the requested document in order to 
construct a response on-the-fly. 




evaNecBuf f exAl* 
loc 

evaJietHTTPSend 
(STATUS_OK) 


The server allocates network buffers 
as needed, fills them with HTTP 
response data, and sends them to the 
application for transmission. 
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Applicati n->Server 
(Demand Loading) 


Server -> 
Application 


Description 




evaFiee 

evaNetBuf feiFiee 
evaNetHTTPEnd 


The server releases any remaining 
resources associated with the HTTP 
transaction and terminates the 
request. The application closes the 
TCP connection at this point. 



4.3. Porting Guidelines 

The EmWeb/Server is distributed as a directory tree of ANSI C files, in order to assure 
the best possible upgrade path and support from Agranat Systems, most of these files 
should not be modified by the system integrator. 

To port EmWeb/Serverto a specific target environment fee, a target-specific conf ig. too 
configuration directory must be created, config.foo contains the target-specific 
configuration files ev_types.h, ev_confag.h, and conf ig.mak. These files can be copied 
from the examples provided in the conf ig directory, and modified as appropriate forthe 
target 

To build the server library obj ./oo/evs.a, use the following command: 

make CONFIG-foo server 

Note: The configure script may be used on Unix systems to 
automatically generate the configuration files forthe local Unix 
development environment target. Typing "make" will build the 
EmWeb/Compiler, the example archives, and the reference 
Unix port. 

4.3.1. Configuration Header Files 

The src/config/ev_types.hfile contains definitions for base Ctypes used throughout 
the EmWeb/Server. Most of these are straightforward and generally do not require 
modification under 32-bit CPU architectures. The one definition which may require 
modification by the system integrator is the preprocessor symbol emweb_endian which 
is defined to either emweb_endian_big or emweb_endian_little, and reflects the byte- 
order of the target processor (Tntel processors are generally little endian while 
Motorola processors are generally big endian). The symbol emweb_mchive_endian 
indicates the byte-order of the archive generated by the EmWeb/Compiler. By default, 
the compiler generates big-endian archives unless the • -little command-line 
argument is present. Note that it is more efficient If the byte-order of the archive 
matches the byte-order of the target processor. 

The src/config/ev_config.n file definitions are expected to be modified extensively 
for porting EmWeb/Server to a particular hardware platform as follows: 
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EW.CONFIG.HTTP.PROTOCOL 

Define the level of protocol conformance desired. Must be set to either 
HTTPJI J> or HTTPJI J. 

EW.CONFIG_OPT10N.DATE 

Define to enable generation of HTTP Date: headers. This function requires 
that the application provide the evaDate function. This is required for 
protocol conformance, but some environments may simply not be able to 
determine the time-of-day. 

EW_CONFIG_OPTION_EXPlRE 

Define to enable generation of HTTP Expire: headers. The symbol 
ews_config_option_date must also be defined. If a dynamic document is 
requested (i.e. a document containing content defined by the application as 
it is being served), then an Expire: header is generated with the current 
time. Otherwise, no Expire: header is generated. The code size may be 
reduced by not defining this symbol. This is recommended for proper HTTP 
caching. 

EW_C0NFIG_0PT10N_LAST_M0DIFIED 

Define to enable generation of HTTP Last modified: headers. The symbol 
ews_config_option_I)ate must also be defined. If a static document is 
requested, then the archive creation date is returned to the Web browser. 
Otherwise, the current time is returned to the Web browser. The code size 
may be reduced by not defining this symbol. This is recommended for 
proper HTTP caching. 

EW_C0NFIG_0PT10N_C0NDITI0NAL_GET 

Define to enable parsing of received if -Modified-since: headers to 
support conditional get functionality defined in the standard. This is 
recommended for proper HTTP caching. 

EW_C0NFIG_OPTlON_PRAGMA_N0CACHE 

Define To enable generation of "pragma: no •cache" HTTP/1.0 headers for 
documents containing dynamic content 

EW_C0NF1G_0PT10N_PERS!STENT 

Define to enable persistent connections. This is recommended, especially 
with HTTP/1.1, for optimum network performance. Persistent connections 
enable the browser to pipeline multiple HTTP requests over a single TCP/ 
IP connection which was not possible in the original HTTP/1 .0 specification. 

EW.CONFIG.OPTION_CHUNKED.OUT 

HTTP/f.1 only. Define to enable the generation of chunked encoded data 
during transmission of documents containing dynamic elements. This 
makes maintaining a persistent connection* possible under certain 



Copyright <0 1997Agranat Systems, Inc. Page 66 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 



EmWeb Functional Specification Confidential 



circumstances and is strongly recommended. 

EW.CONFIG.OPTION.CHUNKEDJN 

HTTP/1.1 only. Required for protocol conformance. Define to enable 
parsing of chunked form data received from the browser, 

EW.CONFIG.OPTION.METHOD.OPTIONS 
Define to enable HTTP/1.1 options method. 

EW.CONFIG.OPTION.METHOD.TRACE 

Define to enable HTTP/1.1 trace method. 

EW.CONFIG.OPTION.CACHE.CONTROL 

Define to enable generation of HTTP/1.1 Cache-Control; headers. 
Recommended for optimum cache control. 

EW.CONFIG.OPTION.STRING 

Define If the application intends to use the <emwe3_string> feature. 
Otherwise, code size may be reduced by not defining this symbol. 

EW.CONFIG.OPTION.STRING.TYPED 

Define to enable typed emweb_strings (i.e. use of emweb_type attribute). 

EW.CONFIG.OPTION.INCLUDE 

Define if the application intends to use the <emwe3_ikclude> feature. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG.OPTION.FORM 

Define if the application intends to use the EmWeb form processing 
interfaces. Otherwise, code size may be reduced by not defining this 
symbol. 

EW.CONFiG.OPTION.IMAGEMAP 

Define if the application intends to use EmWeb imagemaps. Otherwise, 
code size may be reduced by not defining this symbol. 

EW_CONFIG.OPTION.CGi 

Define if the application intends to use the raw CGI application interfaces. 
Otherwise, code size may be reduced by not defining this symbol. 

EW.CONFIG.OPTION.LINK 

Define if the application intends to use the link attribute in access files. 
Otherwise, code size may be reduced by not defining this symbol. 

EW.CONFIG.OPTION.CLONING 

Define if the application intends to use the evsnocumentcione application 
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interface. Otherwise, code size may be r duced by not defining this symbol. 

EW.CONFIG.OPTION.DEMAND.LOADING 

Define if the application intends to use the evsDocumentRegistex/ 
evaDocumentFauit application interface. Otherwise, code size may be 
reduced by not defining this symbol. 

EW.CONFIG_OPTION_DOCUMENT.DATA 

Define if the application intends to use the evsDocumentData application 
interface. Otherwise, code size may be reduced by not defining this symbol. 

EW.CONFIG.OPTION.DOCUMENT.SET.REALM 

Define if the application intends to use the ewsDocumentsetReaim application 
interface. Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CLEANUP 

Define if the application desires to perform a graceful shutdown of the 
EmWeb/Server by invoking ewsshutdovn. In some application 
environments, graceful shutdown may not be necessary as a system restart 
may be accomplished by a re-boot of the processor. The code size may be 
reduced by not defining this symbol 

EW.CONFIG.OPTION.SCHED 

Define if the application Intends to use EmWeb's internal scheduler making 
use of the ewsRun application interface. Otherwise, the code size may be 
reduced by not defining this symbol. 

EW.CONFIG.OPT10N.SCHED_SUSP.RES 

Define if the application intends to use the evssuspend/evsResume 
application interfaces. Otherwise, the code size may be reduced by not 
defining this symbol. 

EW.CONFIG_OPTION_SCHED.FC 

Define if the application intends to use the evsNetFiovcontroi/ 
unFiowcontioi application interfaces. Otherwise, the code size may be 
reduced by not defining this symbol. 

EW.CONFIG.OPT10N.URL.HOOK 

Define If the application intends to use the URL rewriting feature by 
providing the function ev&uRLKook interface. Otherwise, the code size may 
be reduced by not defining this symbol. 

EW.CONFIG_OPTION.AUTH 

Define to enable support for authentication through the evsAuthRegistex 
application Interface. Otherwise, the code size may be reduced by not 
defining this symbol. 
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EW_CONFIG_OPHON_AUTH_BASIC 

Define to enable support for the HTTP/1.0 basic cookie authentication 
method. The symbol ew_confic_option_auth must also be defined. The 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTIONJUJTHJWBASIC 

Define to enable support for the "manual basic" authentication scheme. The 
code size may be reduced by not defining this symbol, 

EWJ)ONFIG_OPTION_AUTH_DIGEST 

Define to enable support for the HTTP/1.1 digest .authentication method. 
The symbol ew_config_option_auth must also be defined. The code size 
may be reduced by nofdefining this symbol. 

Note: EmWeb's digest authentication support is derived from 
the RSA Data Security, Inc. MD5 Message-Digest Algorithm. 
The following legal notice can be found in src/lib/ew_md5c.c: 

Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All 
rights reserved. 

License to copy and use this software is granted provided that it 
is identified as the "RSA Data Security, Inc. KD5 Message-Digest 
Algorithm" in all material mentioning or referencing this software 
or this function. 

License is also granted to make and use derivative works provided 
that such works are identified as "derived from the RSA Data 
Security, Inc. KD5 Message-Digest Algorithm" in all material 
mentioning or referencing the derived work. 

RSA Data Security, Inc. makes no representations concerning either 
the merchantability of this software or the suitability of this 
software for any particular purpose. It is provided "as is H 
without express or implied warranty of any kind. 

These notices must be retained in any copies of any part of this 
documentation and/or software. 

EW.CONFIG.OPTION^AUTH^MDIGEST 

Define to enable support for the "manual digest" authentication scheme. 
The code size may be reduced by not defining this symbol. 

EW.CONFIG^OPTION.AUTH.DIGEST.M 

Define to enable support lor the digestRequlred parameter used In digest 
authentication. This protects against forged messages using proper 
authentication credentials. The symbol ew_confic_option auth digest 
must also be defined. The code si2e may be reduced by nofdefining this 
symbol. 
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EW_CONFIG_OPTION_AUTH_VERIFY 

Define to enable support for secondary application-defined authentication 
The code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_RELEASE_UNUSED 

Define to include extra code that attempts to release received network 
buffers as soon as possible if they do not contain information needed for the 
duration of an HTTP request. Otherwise, if HTTP headers are typically 
received in multiple network buffers, the EmWeb/Server may hold on to 
these buffers longer than necessary. 

EW_CONFIG_OPT10N_FILE 

Define to include local file system support. The code size may be reduced 
by not defining this symbol 

EW_CONFIG_OPTlON_FILE_GET 

Define to include access to local filesystem for GET method requests. This 
option requires ew_config_option_fii.e. The code size may be reduced by 
not defining this symbol. 

EW_CONFIG_OPT10N_COMPRESS 

Define to include extra code required for decompression of compressed 
archives. 

EW_CONFIG_OPTION_CONTEXT_DATE 

Define to enable the evscontextDace application interface. The code size 
may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CONTEXT_PRAGMA 

Define to enable the evsconcextpiagma application interface. The code size 
may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CONTEXT_FROM 

Define to enable the evsconcextFrom application interface. The code size 
may be reduced by not defining this symbol. 

EW_CONFlG_OPTION_CONTEXT_IF_MODIFIED_SINCE 

Define to enable the evscontextifModifiedsince application interface. 
Furthermore, EmWeb/Server honors the HTTP if -modified -since: 
header for static documents by comparing to the archive creation date. 
(Note that dynamic documents are always served). The code size may be 
reduced by not defining this symbol. 

EW_CONFIG_OPTION_;CONTEXT_REFERER 

Define to enable the ewscontextReferer application interface. Otherwise, 
the code size may be reduced by not defining this symbol. 
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EW_CONFIG_OPTION_CONTEXT_USER_AGENT 

Define to enable the evscontexcuseiAgent application interface. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10N_CONTEXT_HOST 

Define to enableThe ewsContextHost application interface. Otherwise the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10N_SEND_REPLY 

Define to enable the" ewsContextSendReply application interface 
Otherw.se, the code size may be reduced by not defining this symbof 

EW_CONFIG_OPTION_CGI_SERVER SOFTWARE 

Define to enable the evscciserveisoftvaie application interface 
Otherwise, the code size may be reduced by not defin^g Sis symbol 

EW_CONFIG_OPTION_CGI_GATEWAY_INTERFACE 

Define to enable the evsccicaTevayinteiface application interface 
Otherw.se. the code size may be reduced by not defining this symbol 

EW_CONFIG_OPTION_CGLSERVER PROTOCOL 

SScl^thf^ 6 - he — «»«v«*.Meoi application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_C0NFIG_0PT10N_CGLREQUEST_METH0D 

Define to enable the evscciRequesrMethod application interface. Otherwise 
the code size may be reduced by not defining this symbol. uinerw,se ' 

EW_CONFIG_OPTION_CGI_PATHJNFO 

Define to enable the e v S cciPa"thinfo application interface. Otherwise the 
code size may be reduced by not defining this symbol. u,erwi5e - ™ 

EW_C0NFIG_0PT10N_CGI_SCRIPT_NAME 

Define to enable the evscciscii^Name application interface. Otherwise the 
code size may be reduced by not defining this symbol. u,erw,se - ™ 

EW_CONFIG_OPTION_CGI_QUERY_STRING 

Define to enable the evscGioue"r y s C ring application interface. Otherwise 
thecodesizemaybereducedbynotdefiningthissymbol. uuierwise - 

EW_C0NF1G_0PTI0N_CGLC0NTENTJTYPE 

Define to enable the evsccicontentType application interface. Otherwise 
the code size may be reduced by not defining this symbol. wu,erwise - 

EW_C0NF1G_0PT10N_CGLC0NTENT_LENGTH 

Define to enable the evsccicontemength application interface. Otherwise, 
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the code size may be reduced by not defining this symbol. 

EW w CONFIG_OPTION_CGLCONTENT_ENCODING 

Define to enable the evsCGiconcencEncoding application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EWJJONFIG_OPTlONLFIELDTYPE_RADIO 

Define to enable support for EmWeb HTML form radio buttons. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW^CONFIG.OPTION.FIELDTYPE.SELECT.SINGLE 

Define to enable support for EmWeb HTML form single option selection 
boxes. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_FIELDTYPE_SELECT_MULTIPLE 

Define to enable support for EmWeb HTML form multiple option selection 
boxes. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW.CONFIG.OPTION.F!ELDTYPE_CHECKBOX 

Define to enable support for EmWeb HTML form checkbox fields. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFlG_OPTION_FIELDTYPE_TEXT 

Define to enable support for EmWeb HTML form text fields. Otherwise, the 
code size may be reduced by not defining this symbol. 

EW_C0NF1G_0PT10N_F1ELDTYPEJMAGE 

Define to enable support for EmWeb HTML form image inputs. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW.CONFIG_OPTION.FIELDTYPE.DECiMAL.UINT 

Define to enable support for EmWeb HTML form text fields for unsigned 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW.CONFIG.OPTlON_FIELDTYPE.DECIMAL.INT 

Define to enable support for EmWeb HTML form text fields for signed 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW.C0NFIG.0PT10N.FIELDTYPE.HEXJNT 

Define to enable support for EmWeb HTML form text fields for hexadecimal 
Integers. Otherwise, the code size may be reduced by not defining this 
symbol. 
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EW.CONFIG.OPTION.FIELDTYPE.HEX.STRING 

Define to enable support for EmWeb HTML torn text fields for hexadecimal 
octet strings. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW.CONFIG.OPTION.FIELDTYPE.DOTTEDIP 

Define to enable support for EmWeb HTML form text fields for dotted IP 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW.CONFIG.OPTION.FIELDTYPE.DECNETJV 

Define to enable support for EmWeb HTML form text fields for DECneMV 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG.OPTION.FIELDTYPEJEEE.MAC 

Define to enable support for EmWeb HTML form text fields for IEEE MAC 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW.CONFIG.OPTION.F1ELDTYPE.FDDI.MAC 

Define to enable support for EmWeb HTML form text fields for FDDI MAC 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW.CONFIG_OPTION_FIELDTYPE_STD.MAC 

Define to enable support for EmWeb HTML form text fields for big or little 
endian standard MAC addresses. Otherwise, the code size maybe reduced 
by not defining this symbol. 

EW_C0NFIG_0PT10N_F1ELDTYPE_01D 

Define to enable support for EmWeb HTML form text fields for SNMP object 
identifiers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFJG_OPnON_FIELDTYPE_FlLE 

Define to enable support for RFC 1867 file upload from browser. This option 
requires Ew_coNnc.opnoN.riLE. The code size may be reduced by not 
defining thtesymbol. 

EW.CONFJG.OPTION.BROKEN.IMS.EXTRA.DATA 

Define to handle non-conformant browsers that place, extra data at the end 
of If-Modified-S.ince; headers. Otherwise, the code size may be reduced by 
not defining this symbol. 
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EWj;ONFlGJ>PTION_BROKEN_NEED_OPAQUE 

Define to handle non-conformant browsers that require optional opaque 
field in digest authentication headers. Otherwise, the code size may be 
reduced by not defining this symbol. 

EwaNetBuffer 

Define the C type used to represent a buffer descriptor. 

EW A_NET_B UFFE R_N LJLL 

Define the value of a null buffer descriptor used to terminate a chain of 
buffers or indicate no buffers available. 

EwaNetHandle 

Define the C type used for the application-defined network handle passed 
to EmWeb/Server in ewsNetHTTPstart and available from the request 

context by evsContexcNetHandle. 

EwaDocumentHandle 

Define the C type used for the application-defined document handle passed 

tO EmWeb/Server in evsDocumentClone or evsDocumentRegistei and 

available from the request context by evsconcextDocumentHandie. 

EWA_DOCUMENT_HANDLE_NULL 

Define the value for a null document handle stored in the context for 
documents that have not been cloned or registered. 

EwaAuthHandle 

Define the C type used for the application-defined authorization handle 
passed to EmWeb/Server in evsAuthRegister and available from the 

request Context by ewsContextAuthHandle. 

EWS_AUTH_HANDLE_NULL 

Define the value for a null authorization handle stored in the context for 
requests that have not been authenticated. 

EwaAuthNonce 

Define the C structure containing parameters used in generating nonce 
challenges. 

EwaCGIHandle 

Define the C type used for the application-defined CGI handle passed to 
EmWeb/Server from evaccistait_* and returned to the application in 
subsequent evaCGicata_*. 

EWA_CGI_HANDLE_NULL 

Define the value for a NULL CGI handle stored in the context for CGI 
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requests. 

EWAJTASKJ.OCK0 

This application-defined macro is invoked by EmWeb/Server to enter a 
critical region. If the application is preemptive and multiple threads may 
access EmWeb application interface functions simultaneously, then this 
macro should be defined in such a way as to disable preemption. 

EWAJTASKJJNLOCKO 

This application-defined macro is invoked by EmWeb/Server to leave a 
critical region entered by ewa_task_lock o . 

EMWEB.ERRORO 

This application-defined macro is invoked by EmWeb/Server to report 
serious error conditions, usually a result of improper system integration. 

EMWEBJVARNO 

This application-defined macro is invoked by EmWeb/Server to report an 
error condition for which recovery is possible. 

EMWEB JTRACEO 

This application-defined macro is invoked by EmWeb/Server to trace 

execution for debugging. 

EWA_LOG_HOOK 

Define to enable the evaLogHooko application interface. Otherwise, the 
code size may be reduced by not defining this symbol. 

EMWEB_SANITY 

Define to enable extra code for checking the consistent use of the API and 
internal data structures. This is strongly recommended during initial porting 
and debug. However, the code size may be reduced by not defining this 
symbol. 

EMWEB_HAVE_MEMCPY 

Define to use application-provided run-time znemcpy library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWE9_HAVE_MEMSET 

Define to use application-provided run-time memset library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEBJiAVE.SPRINTF 

Define to use application-provided run-time spxintf library function. 
Otherwise, extra server code is Included to handle conversions from 
integers to strings (%d, %x). 
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EMWEB_HAVE_STRCPY 

Define to use application-provided run-time strcpy library function. 
Otherwise, extra server code is included to implement this functionality. 

EM WE B_H A VE_STRLE N 

Define to use application-provided run-time stxien library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_STRCMP 

Define to use application-provided run-time sticmp library function. 
Otherwise, extra server code is included to implement this functionality. 

EwaFileHandle 

Define the C type used for the application-defined file handle used in the 
local filesystem API. 

EWA_FILE_HANDLE_NULL 

Define the value for a null file handle as used by the local filesystem API. 

EwaFileName 

Define the C structure used to represent an application-defined filename 
parameter as used by the local filesystem API. 

The following macros may be defined to override EmWeb/Server defaults as follows; 

EWS_FILE.HASH.SIZE 

Default: 256. Information about each unique URL loaded from an archive, 
registered, or cloned, is maintained in an open hash table for fast lookup. 
This macro may be defined to set the number of entries in the hash table, 
where each entry contains a pointer value. Smaller values will typically 
decrease memory usage while increasing search times. 

EWS_REALMJHASH_SIZE 

Default: 4. Information about each unique realm defined in loaded archives 
or by the evsDocumentsetReaimo function is maintained in an open hash 
table for fast lookup. This macro may be defined to set the number of entries 
in the hash table, where each entry contains a pointer value. Smaller values 
will typically decrease memory usage while increasing search times. 

EWS_NONCE_QUEUE_SIZE 

Default: 4. If digest authentication Is used, outstanding nonce values are 
maintained in a circular queue. This macro may be defined to set the 
maximum number of outstanding nonce values, where each value will 
contain approximately 48 bytes of state information plus the size of the 
application-defined EvaAuthNonce structure. Larger values are 
recommended if one-time nonces are to be used and/or many simultaneous 
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authenticated requests from different clients are likely. 

EWS_HTTP_STATUS_204, EWS.HTTP_STRING.204 

Default: "No Content", "\r\n n . These macros may be used to override the 
status line and message body issued for a no content HTTP response. (This 
status is generated in response to a form submission application function 
returning NULL, or to an undefined region of an imagemap if no default URL 
was specified). 

EWSJTTTP_STATUS_304, EWS_HTTP_STRING_304 

Default: "Not Modified", "\r\n B . These macros may be used to override the 
status line and message body issued for a not modified HTTP response. 
(This status is generated in response to a conditional GET request if the 
requested document has not changed since the "If-Modified-Since:" value), 

EWS_HTTP_STATUS_400, EWS_HTTP_STRING_400 

Default: "Bad Request", "\An400 Bad Request\r\n". These macros may be 
used to override the status line and message body issued for a bad request 
HTTP response. (This status is generated in response to an HTTP request 
that could not be parsed). 

EWS_HTTP_STATUS_401 , EWS_HTTP_STRING_401 

Default: "Unauthorized", "\r\n401 Unauthorized\r\n fl . These macros may be 
used to override the status line and message body issued for an 
unauthorized HTTP response. (This status is generated in response to an 
HTTP request that did not contain proper credentials to access the server). 

EWS_HTTP_STATUS_404, EWS_HTTP_STRING_404 

Default: "Not Pound", "\r\n404 Not Found\r\n". These macros may be used 
to override the status line and message body issued for a not found HTTP 
response. (This status is generated in response to an HTTP requests for an 
unknown or hidden URL). 

EWS_HTTP.STATUS.41 1 , EWS_HTTP_STRING_41 1 

Default: "Length Required", "\r\n411 Length Required\r\n\ These macros 
may be used to override the status line and message body issued for an 
interna) error HTTP response. (This status is generated in response to an 
HTTP/1.1 request containing chunk encoded form data with 

EW_CONFIG_OFTION_CHUNKED_IN disabled). 

EWS.HTTP_STATUS.500, EWS.HTTP_STR1NG.500 

Default: "Internal Error", "\r\n500 Internal Error\r\n n . These macros may be 
used to override the status line and message body issued for an internal 
error HTTP response. (This status is generated in response to an HTTP 
request resulting in a detectable internal error. This should not ever occur.) 
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EWS_HTTP_STATUS_501 f EWS_HTTP_STRING_501 

Default: "Not Implemented", "\r\n501 Not lmplemented\r\n". These macros 
may be used to override the status line and message body issued for a not 
implemented HTTP response, (This status is generated in response to an 
HTTP request containing a method not supported by the URL). 

EWS_HTTP_STATUS_503, EWS.HTTP_STRING.503 

Default: "Service Unavailable", "\r\n503 Service Unavailable\r\n\ These 
macros may be used to override the status line and message body issued 
for a service unavailable HTTP response. (This status is generated in 
response to an HTTP request for a registered and unloaded document 
when the. application-specific ewaDocumentFauttQ function aborts the 
request rather than loading the archive containing the URL). 

4.3.2. Application-Provided Functions 

The following functions must be provided by the application: 

- System functions 

. ewaAlloc 
. ewaFree 

• Network functions 

. ewaNetBufferAlloc 
. ewaNetBufferFree 
. ewaNetBufferNextGet 
. ewaNetBufferNextSet 
. ewaNetBufferLengthGet 
. ewaNetBufferLengthSet 
. ewaNetBufferDataGet 
. ewaNetBufferDataSet 
. ewaNetHTTPSend 
. ewaNetHTTPEnd 
. ewaNetHTTPCIeanup 
. ewaNetLocalHostName 



The following functions may be provided by the application if certain optional EmWeb/ 
Server features are desired. 

- System functions 

. ewaDate 
. ewaLogHook 
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- Document functions 

. ewaDocurnentFault 
. ewaURLHook 

- Authentication functions 

. ewaAuthRealmQualifier 

- Digest Authentication functions 

. ewaAuthNonceCreate 
. ewaAuthNonceCheck 

• Manual Authentication functions 

. ewaAuthCheckBasic 
. ewaAuthCheckDigest 
. ewaAuthVerifySecurity 

4.4. Memory Requirements 

The following table Illustrates the approximate incremental executable image size of the 
EmWeb/Server for various configuration options enabled compiled using GNU gcc- 
2.7.0 with -02 for the Intel 486, the Intel i960, and the Motorola MC68000 architectures. 
These values are subject to change without notice. 



Incremental Option 


i486 | i960 


MC68000 


Base EmWeb/Server functionality 


, 7,380 


7,496 


6,238 


<EMWEB_STRING> 


180 


216 


184 


Typed <EMWEB_STRlNG>s 


464 


464 


454 


<EMWEB_INCLUDE> 
(requires some additional code 
from <EMWEB_STRING>). 


384 


400 


312 


Base EmWeb HTML form support 


3,124 


3,168 
1— 


2,548 


imagemap support 


28B 


320 


272 


Base raw CGI support 


640 


656 


578 


URL Link support 


16 


32 


28 


Document cloning 


400 


.400 


314 


Document on-demand loading 


492 


520 


440 
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Incremental Ootton 


i486 


i960 


MC68000 


Document data access 


64 


72 


74 


Graceful server shutdown 


272 


264 


220 


Request scheduling (yield CPU) 


656 


624 


444 


Proxy (ewsSuspend/ewsResume) 
(requires request scheduling) 


320 


296 


242 


Network flow control 

[requires request scneuuungj 


368 


288 


264 


unL rewnung \cwawriunyofvy 


**nz 


jlUO 


1 04 




17R 


9 OA 


1 /u 


GET/HEAD from local filesystem 
fReauires base filesvstem suo ) 


1,876 


1,480 


1,326 


Base authentication support 


1,168 


1,032 


934 


Basic authentication 


952 


1,056 


824 


Digest authentication 


5,547 


6,732 


5,366 


Client message digest verification 
(requires digest authentication) 


1,335 


1,016 


742 


Manual basic authentication 
(requires basic authentication) 


608 


472 


482 


Manual basic decode 
(reouires manual basic) 


336 


352 


198 


Manual dinest authentication 
(requires digest authentication) 


384 


368 




Manual authentication verification 


144 


144 




Run-time document realm override 


0 


0 


0 


Base HTTP/1.1 support 


1,284 


1,160 


972 


Persistent connections 


883 


616 


614 


Generate chunked encoding 
(requires HTTP/1. 1) 


828 


784 


632 


Parse chunked encoding 
(requires HTTP/1.1). 


855 


552 


468 


OPTIONS method 


250 


240 


192 
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incremental Ootion 


i486 


I960 

IvVV 




1 nnL/L IIlclliUU 




ODD 
£.00 


204 


wciieicticr uauiC'UUfUiwl ilcaucid 


1 00 




96 


Ocflcf ale Ualc neaucrS 


A •i 


DA 
0* 


32 


oeneiaie expire neauers 
(ewaDate) 


/O 


176 


60 


Generate Last-Modified headers 


82 


112 


76 


Conditional get support 


239 


280 


248 


Generate Pragma headers 


35 


48 


34 


Early release of network buffers 


224 


240 


208 


Compression 


525 


584 


462 


Parse Date headers 


64 


56 


72 


Parse Pragma headers 


75 


64 


82 


Parse From headers 


73 


72 


82 


Parse If-Modified-Since headers 


64 


64 


72 


Parse Referer headers 


76 


64 


86 


Parse User-Agent headers 


79 


104 


90 


Parse Host headers 


169 


128 


124 


ewsContextSendReply 


626 


632 


494 


ewsCGIServerSoftware 


31 


40 


30 


ewsCGIGatewaylnterface 


24 


32 


22 


ewsCGIServerProtocol 


64 


56 


6B 


ewsCG IRequestMethod 


64 


64 


68 


ewsCGIPathlnfo 


16 


16 


16 


ewsCGIScriptName 


16 


16 


16 


ews CGI Query String 


64 


64 


68 


ewsCGIContentType 


80 


64 


72 


ewsCGIContentLength 


16 


16 


16 


ewsCGIContentEnooding 


64 


64 


72 
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Incremental Option 


i486 


i960 


MC68000 

t 


Form radio buttons 


328 


304 


254 


Form single option select boxes 


57 


64 


62 


Form multiple option select boxes 


128 


144 


124 


Form checkboxes 


96 


96 


92 


Form text fields 


307 


352 


256 


Form image input fields 


93 


104 


86 


Form text fields - unsigned integer 


0 


0 


0 


Form text fields - signed integer 
(requires some code from 
unsigned integer) 


98 


128 


90 


Form text fields - hexadecimal int . 
(requires some code from 
unsigned integer) 


164 


184 


166 


Form text fields - hex string 
(requires some code from 
unsigned integer) 


706 


704 


550 


Form text fields - dotted IP 
(requires some code from 
unsigned integer) 


354 


416 


3 10 


Form text fields - DECNet IV 
(requires some code from 
unsigned integer) 


272 


352 


250 


Form text fields - IEEE MAC 


144 


160 


136 


Form text fields ■ FDDI MAC 
(requires some code from IEEE 
MAC) 


48 


48 


A A 


Form text fields - Standard MAC 
(requires some code from IEEE 
MAC) 


160 


192 


168 


Form text fields • SNMP Object ID 


400 


400 


340 


Form file fiieds • file upload 
(requires base filesystem support) 


4,372 


4,232 


3,394 


Broken If-Modified-Since Extra 


84 


128 


124 
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incremental Option 


i486 


i960 


MC68000 


Broken digest need opaque 


16 


16 


16 


Internal sprintf library 


656 


736 


582 


Internal strcpy library 


112 


336 


46 


Internal strcmp library 


128 


184 


52 


Internal strlen library 


-160 


384 


162 


Internal memcpy library 


160 


80 


-8 


Internal memset library 


16 


16 


-2 


Extra sanity checking code 


1.248 


1,080 


1,008 


Error reporting 


2,498 


2,984 


2,358 


Warning reporting 


2.527 


2,888 


2,350 


Debug tracing 


1,686 


2,392 


1,764 


Logging hook 


704 


1,056 


778 


FULL CONFIGURATION 


52,677 


55,348 


44,740 



Note that some of the configurable options listed in the table above depend on pieces 
of code included from previous options as indicated. The table shows the incremental 
requirements as each option is added from top to bottom. Therefore, the executable 
image size for an arbitrary set of options may be different than the sum of the values 
shown above. 

Additional archive memory requirements include 

• Compressed file contents and embedded application object code (controlled by 
application) 

- 120 bytes per archive 

- 36 bytes per document in archive (plus null-terminated URL string) 

- 12 bytes per <£mweb_stoinc> , <emweb_include> , CGI script, or form field 

- null terminated strings for authorization realms, mime types, creation date, etc. 

- compression dictionary (if compression used). 
Additional run-time memory requirements include: 
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5. Conformance 

The EmWeb/Server implements the HTTP/1.1 and HTTP/1.0 protocols, and MD5 Digest 
Authentication. 

The EmWeb/Server raw CGI capabilities support the functionality of CGI/1.1, but the 
interfaces are non-standard as they are optimized for the EmWeb/Server environment. In 
addition, some CGI/1.1 interlaces depend upon the specific integration of EmWeb/Server 
into the application environment 

The Em Web/Compiler supports HTML72.0 Forms with RFC 1867 file upload extensions. 
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- Network buffers (controlled by application). EmWeb/Server typically holds on to 
received buffers containing HTTP headers of interest for the duration of a request 
and typically allocates only one or two buffers before sending them to the application 
for transmission. 

- 1,028 - 1,096 bytes total global EmWeb state (using defaults for hash table sizes 
which may be overridden by application) 

• 176 - 635 bytes per HTTP request (plus 48-52 bytes for first served document, plus 
48 bytes for decompression context if compressed) 

-48-52 bytes per nested <emwebinclude> document (plus 48 bytes for de- 
compression context if compressed) 

- 40-64 bytes per URL in archive (including clones and registered documents) 

- 20-44 bytes per authorization realm plus null-terminated realm name string 

- 20-28 bytes per authorization entry plus Base64 or MD5 encoding of user/password 



Copyright Q4397Agranat Systems, Inc. Page 84 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 



PCT/US97/13817 " 



EmWeb Functional Specification Confidential . Release Hist ory 

6. Release History 



Release 1.0 (12/23/96) 


General Availability 


Release 1.1 (02/16/97) 


Added network flow-control interfaces 


Release 1.2 (02/26/97) 


Ported to VxWorks 


Release 1.3 (03/07/97) 


Ported to pSOS 


Release 2.0 (04/14/97) 


Added HTTP/1.1 support 
Added support for typed EMWEB.STRINGs 
Added EMWEB.STATIC cache-control override 
Added support for remote authentication databases 


Release 2.1 (06/20/97) 


Added native filesystem support 
Added RFC 1867 (file upload from browser) support 
Added support for EMWEB_TYPE°OBJECTJD 
Added support for SNMP Research <mibobj> tags 
Added ewaNetHTTPCIeanupQ interlaces 
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src/confio/ew_typ8S.h 



A. EmWeb Application Interface Header Files 



This appendix is intended for reference only and is not part of this specification. The C 
header files listed here are part of the standard EmWeb source distribution and may be 
updated from time to time. 



A-1. Configuration 

These sample configuration header files are provided in the EmWeb source distribution. It 
is expected that these files will be modified by the system integrator in order to port the 
EmWeb/Server to the target environment No other files in the EmWeb distribution should 
be modified in any way. 



A-1.1. src/config/ewjypes.h 

This files contains definitions for base C" types used throughout the EmWeb product. In 
most environments, this file will not need to be modified except possibly for the definition 
of emws3_endian and emwebjvrchive_sndian. However, for some compilers, it may be 
necessary for the system integrator to modify additional definitions here. 



* ev_types.h,v 1,20 1997/03/31 19:14:25 lawrence Exp 

* Produce: EmWeb 

* Release: R2_ 1 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 

* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

* Copyright (C> 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 

* Agranat Systems, Inc. 

* 1345 Main Street 

* Waltham, MA 02154 

* (617) 893-786B 

* salesoagranat.com, support9agranat.com 

* http://www.agranat.com/ 

* EmWeb common types 
•/ 

ftifndef _EW_types_h 
»def ine ~EW~TYPES H 
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src/config/ew_types .h 



/* true or false (non-2ero 01 zero) •/ 



ftdefine TRUE * (0 0) 

ftdefine FALSE CTRUE) 

cypedef uintf boolean; 
/* 

* POINTER INTEGER 

* The pointer integer is an unsigned integer large enough to accommodate a 

* machine pointer. This is used primarily for generic pointer arithmetic. 



typedef P_INT 



pint; 



/* unsigned integer for pointer •/ 



* NULL POINTER 
ftifndef NULL 

ftdefine NULL (0) 
ftendif /• NULL */ 



/• 

• ENDIAN (don't change these) 
•/ 

ftdefine EMWEB_ENDIAN_BIG 1234 
ftdefine EMWEB~ENDIAN~LITTLE 4321 

typedef enum Endian_e 
{ 

ewBigEndian - EMWEB_ENDIAN_BIG , 
evLittleEndian • EKWEB~ENDIAN~LITTLE 
) Endian; 



#if 0 
/• 

* EMWEB ENDIAN - Define as endian-ness of target architecture 
•/ 

ftifndef EMWEB ENDIAN 
ft ifdef HAVE^CONFIGJ! 
ft include -config.h- 
ft ifdef W0KD5_BIGENDIAN 

# define EMWEB_ENDIAN EMWEB_ENDIAN_BIG . 

ft else 

ft define EMWEB_ENDIAN EMWEB_ENDIAN_LITTLE 

ft endif " 
ft else 

ft pragma error -Define EMWEB_ENDIAN for target" 

ft endif 

«else 

ft pragma error "Define EMWEB_ENDIAN for target" 
ft endif /• HAVE_CONFIG_H */ 
ftendif /• !TBD? */ 



/• 

* EMWEB ARCHIVE ENDIAN 
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* C-TYPES 

* The following basic C- types aie defined (see ev config.h) 
*/ 

flifndef INT8 

tt define INT8 signed char 
I* end if 

tfifndef UINT8 

ft define UINTB unsigned chai 
fiendif 

aifndef INT26 

# define INT16 short int 
*endif 

flifndef INT32 

# define INT32 long int 
ftendif 

fcifndef P_INT /• an integer the same size as a pointer */ 

# define P_INT int 
*endif 



typedef INT8 int8; 

typedef INT16 inti6; 

typedef INT32 int32; 

typedef UINT8 uint8; 

typedef unsigned INT16 uintl6; 

typedef unsigned INT32 uint32; 



/• signed eight bit integei •/ 

/• signed sixteen bit integer •/ 

/* signed thirty -two bit integei */ 

/• unsigned eight bit integei •/ 

/* unsigned sixteen bit integei •/ 

/* unsigned thirty -two bit integer */ 



* Volatiles for memory shared with devices 
•/ 

typedef volatile intB vintS; /• volatile signed eight bits */ 

typedef volatile intl6 vint!6; /» volatile signed sixteen bits */ 

typedef volatile int32 vint32; /• volatile signed thirty- two bits •/ 

typedef volatile uintB vuint8; /♦ volatile signed eight bits */ 

typedef volatile uintl6 vuintl6; /• volatile unsigned sixteen bits •/ 

typedef volatile uint32 vuint32; /* volatile unsigned thirty -two bits */ 

h 

* FAST TYPES 

* The following types offer the most efficient compilation fox optimized speed 

* These are never assumed to be more than 16 bits. 
•/ 

typedef int / aintf; /* signed integer */ 

typedef unsigned uintf; /• unsigned integer •/ 

/* 

* BOOLEAN 

* The boolean type is used primarily as a function return type. Note that 

* a default representation of TRUE and FALSE are defined. Hovevei, caie 

* should be taken to avoid comparing against these values. For most compilers, 

* TRUE can be any non-zero integer while FALSE is defined as 2ero. 
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* Define ndian for target archive as generated by EmWeb/Compil r 
•/ 

^define EMWEB_ARCHIVE_ENDIAN EMWEB_ENDIAN_BIG 
/• 

* COMPILER COMPATIBILITY 
* 

* BEGIN_DECLS precedes external definitions, END_DECLS follows external 

* definitions. These could be defined as 'extern "C" {' and respectively 
s * foi GKU C** compilers! for example. 

•/ 

#ifdef cplusplus 

^define _BEGIN_DECLS extern "C" { 

#def ine END_DECLS } 

#else /• cplusplus */ 

#def ine BEGIN_DECLS 

^define EKD_DECLS 

ftendif /• cplusplus */ 

/* 

* PROTOTYPES 
•/ 

BEGIN_DECLS 

END DECLS 



ttendif /• EW TYPES H */ 



A-1.2. src/config/ew_config,h 

This file must be modified by the system integrator to taylor Em Web/Server to the target 
environment. 

ev_COnfig.h,V 1.77.2.3 1997/06/15 19:22:31 ian Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

Copyright (C) 1996, 1997 Agianat Systems, Inc. 
All Rights Reserved 

Agianat Systems, Inc. 
1345 Main Street 
Walt ham, MA 02154 

(617) 893-7868 

sa les@agi ana t . com , suppor tffiagi ana t . com 
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* hccp: //vrw. a granat.com/ 

* EmWeb common conf iguiation 

#ifndef _EW_CONFIG_H 
ffdefine jEvfcONFIG~H 

/• 

* Types for sized integers: INT8 INT16 INT32 P_INT 

* These are guesses as to the correct types to produce the 

* required sizes for your system. 

* The configure script vill attempt to set these correctly 

* for the compiler platform; you should sec when you copy this 

* file for each target. 
•/ 

aifndef INT8 

# define INT8 signed char 
ffendif 

#ifndef INT16 

n define INT16 short int 
tfendif 

Hifndef INT32 

ft define INT32 int 

ftendif 

tfifndef P_INT /• an integer the same size as a pointer •/ 

« define P_INT int 

#endif 

^include "ew_types .h M 
/• 

* INCLUDES 

* Any system includes needed by application environment go here 
•/ 

extern void application_tick O ; 
^include <stdio.h> 
^include <stdlib.h> 
#include <sys/types.h> 
^include <netinet/in.h> 
^include <signal.h> 

/• 

* HTTP PROTOCOL VERSION 
•/ 

ft define HTTP_1_0 1000 /* DO NOT MODIFY •/ 

# define HTTP~i~l 1001 /• DO NOT MODIFY */ 

/* 

* Select desired conformance level 
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♦define EW_CONFICjrTTP_PROTOCOL HTTP_1_1 
/• 

• PROTOCOL OPTIONS <>■ HTTP/1.0) 

« (R) Required, but some embedded systems don't have time -of -day 

* (O) Optional, but strongly recommended 

♦define EW_CONFIC_OPTION_DATE /• (R) Genezate Date: */ 

♦define EW_CONFIG_OPTCON~EXPIRE /• (o) Generate Expire: */ 

♦define EW_CONFIG_OPTION_LAST_MODIFTED /• (O) Generate Last -modified: •/ 

♦define EW_CONFIG_OPTION_CONDrTIONAL_GET/* (O) Parse If -Modif ied-Since : •/ 

♦define EwTcONFI G~OPTI ON_PRAGMA_NOCACHE /* (O) Generate Pragma: no -cache •/ 



PROTOCOL OPTIONS (>- HTTP/2. 1) 

(O) Optional, but strongly recommended 
(*) May be used with HTTP/l.o 



•/ 

♦define EW_CONFIG_OPTION_PERSI STENT h 
♦define Ew2cONFIG_OPTION~CHUNKED_OUT- h 
♦define EvTcONFI GJDPTI ON_CHUNXED~IN /* 
♦define EW_CONFIG_OPTXON~METHOD_OPTIONS /* 
♦define EW~CONFI GJ3PTC ON_METHOD~TRXCE /• 
♦undef EW_CONFIG_OPTION_METHOD_PUT /* 
♦undef EW~CONFIG~OOTIOn2mETHOD~DELETE /* 
♦define EW CONFIG OPTION CACHE CONTROL /* 



(O*) persistent connections */ 
(O) respond vi th chunked encoding •/ 
(OJ parse chunked encoding •/ 
(O*) support OPTIONS method */ 
CO*) support TRACE method •/ 
(•) support PUT operations */ 
(*) support DELETE operations */ 
(0*) Generate Cache- Control : */ 



CONFIGURATION OPTIONS 



* The EmWeb/Server may be customized by the application developer to balance 

* between functionality v.s. memory and CPU requirements. Each of the options 

* below may be selected (♦define) or unselected (Sundef ) . 
•/ 

♦define EW_CONFIG_OPTION_STRING 
♦define EW~C0N FI G~OPTI ON~STRING_TYPED 
♦define EW~C0NFI G~OPTI 0N~IN CLUDE 
♦define EvTcONFI C~OPTI ON~FORM 
♦define EW~CONFIG~OPTIONJtMAG£MAP 
♦define EvTcONFIG^OPTI ON_CGI 
♦define EW~CONFI G~0PTI 0N_LINK 
♦define EW~CONFI C~OPTI ON^CLONING 
♦define EW~CONFIG~OPTION_DErtAND_LOADING 

♦define EW~CONFIG_OPTIONJDOCUMENT_DATA /* direct archive data access support */ 
♦define EW_CONFIG2oPTION_DOCUMENT_SET_REALM /♦ run- time realm assignment sup. •/ 
♦define EW_CX)NFIG~OPTION~CLEANUP /• 
♦define EvTcONFIG_OPTION^SCKED /* 
♦define EW~CONFI G~OPTI 0N~S CHED_SUS P_RES /• 
♦define EW~C0NFIG~0PTI0N~SOiED~FC " /• 
♦define EW~CONFIC_0PTO0NJJRL_H00X /• 
♦define EW~CONFIGJ>mON~AUTH /• 
♦define Ew"coNFIg"oPTIOn]]aUTH_BASIC /• 
♦define E W~C0N FI G~0PTI ON~AUTHJDI GEST /• 
♦define EW~CONFIC~OPTION~AUTH~DIGEST M /* 



/• emweb_string support */ 
/* typed emweb_string support */ 
/* emweb_include support •/ 
/* form support •/ 
/« support for imagemaps */ 
/• raw CGI support */ 
/* link node support */ 
/* URL cloning support */ 
/* demand document loading support */ 
/* direct archive data access support * 



graceful cleanup support */ 
request scheduling support */ 
suspend/resume request support * 
flow control support */ 
request URL rewriting hook •/ 
authorization support */ 
basic authorization support •/ 
digest authorization support */ 
m , verify client message digest 
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idefine EW_C0NFI G_OPTI ON_AUTH_MB AS I C /• "manual* 4 basic authentication */ 
idefine EW_CONFIG_OPTION_AUTH_MBASIC_DECODE /* do has 64 d code foi MBASIC •/ 
idefine EW_cONFIG_omON_AUTHJIDIG£ST /* "manual- digest authentication •/ 
idefine EW_CONFIGj>PnONJWTH_VERIFY /* manual verification of client */ 
idefine EW_cONFXG_OPTXONCOMPRESS /• archive decompression support •/ 

idefine EW_CONFXG_OP'TIONRELEASE UNUSED /* Early release of unused buffers V 
idefine EW_CONFIG_OPTXONFILE /• local filesystem support V 

idefine EW_CONFIC_pPTION_FIL.E_GET /* local filesystem GET method */ 

idefine EW_CONFIG_OPTION_FI UNDELETE /* local filesystem DELETE method •/ 
idefine EW_C0NFIG_0PTI0N_FXLE_PUT /* local filesystem PUT method */ 

/* 

* Options to include support for retrieving HTTP request headers 
*/ 

#define EW_CONFIG_OPTION_CX>NTEXT_DAT£ 

#define ew_config_oftion~cont£xt_fragma 

#define £W_CONFI G_0 PTT ON~CONTEXT~FROM 

#define Ew_coNFiG~omoN_coNT£XT~iFj*oDiFiED_siNCE 
idefine ew_config_option_context~referer 
idefine ew^onfxg^option^contextjjser^agent 

idefine EW_CON FI G~0 PTI ON^CONTEXT^H OS T~ 
/* 

* Option for serving document to browser in response to form or CGI 
•/ 

idefine EW_CONFIG_oraON_C0NTEXT_SEND_REPLY 
/* 

* Options to include support for CGI access functions 
*/ 

idefine EW_CONFIGJ)PTION_CGI_S£RVER_SOFTWARE 
idefine EW_CONFIG~OPTION~CGIJ3ATEWAY_INTERFACE 

idefine ew~config"option2cgi"server_protocol 
idefine ew_config~option~cgi~request_method 
idefine ew_config~option2cgi~path_info 

#define EW_CONFIG~OPTIOK_CGI~SCRIPT_NAME 
idefine Ew"cONFIG_OPTION^CGl20UERY_STRING 
#define EW_CONFIG~OPTION^CGI~CONTENT_TYPE 
idefine EW_CONFI G~OPTI ON~CCI~CONTENT~LENCTH 
idefine EW_CONFIG~omON2cGI~CONTENT_ENC0DING 

/• 

* Options to handle certain form field types (EW_C0NFIG_0PTI0N FORM must be 

* defined for these to take effect) . - - - 
•/ 

idefine EW_CONFIG_OPTION_FIELDTYPE_RADIO 
idefine EW^CONFIG^OPTION^FIELDTYPE^SELECT^SINGLE 
♦define Evf CONFI G^OPTI ON^FIELDTYPE^SELECT^MULTI PLE 
idefine EW^CONFIG^OPTION^FIELDTYPE^CHECKBOX 
idefine EW_CONFIG"oPTION^FIELDTYPE"TEXT 

#define ew^config^option'fieldtype^image 

idefine EvTcONFI G~OPTI 0N~FI ELDTYPE~DECIMAL_UI NT 
idefine EW^CONFIG~OPTION""FIELDTYPE"DECIMAL_INT 
idefine EW CONFIG OPTION~FIELDTYPE~HEX INt" 
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ftdefine EW_CONFIG_OPTION_FIELDTYFE_HEX_STRING 
#de f i ne EW^CONFI GJDPTI ON_F I E LDTYP E~D OTTE D I P 
#d fine EW^CONFIG^OPTION^riELDTYPE^DECNET^IV 
^define EW~CONFIG~OPTION_FIElI)TYPE~IEEEJiAC 
^define EW~cONFIG~omON_FIEU)TYPE~FDDI~MAC 
ftdefine Ew"cONFIG"oPTION"FIEU)TyPE"sTD_MAC 
#define EW~CONFIg2oPTION_FIELDTYPE~OID 
tfdefine EW_CONFIC_OPTION_FI£LDTYPE_FILE 

/• 

* Force use of the buffer early release option if support for 

* file input field - needed so we don't buffer the entire 

* incoming file. 
*/ 

3 i f de f EW_CONFI G_OPTI ON_FIELDTYPE_FI LE 
tfifndef EW~CONFI G~OPTI ON~RE LEAS E_UNU5 ED 
#define EW~CONFI C~0 PTI ON~R£ LE AS E_UNUS ED 
#endif /• EW_CONFIG_OPTION_RELEASEJJNUSED •/ 
#endif /* EW~CONFI G~OPTI ON~F3 ELDT Y PE_FI LE •/ 

/• 

* Options to handle non-conformant browsers 
* 

* BROKEN_IMS_EXTRA_BATA • Several recent versions of Netscape incorrectly 

* add extra information at the end of an If -Modified -Since: header in the 

* form (si2e - n) M . This is in violation of the HTTP specification and 

* causes EmWeb/Servei to effectively ignore the header. Since so many 

* browsers exhibit this behaviour, this work-around is provided to ignore 

* extra characters after the date string. 
•/ 

tfdef ine EW CONFIG_OPTION BROKEN IMS EXTRA DATA 



* BROKEN_N££D_OPA0UE • NCSA_Mosaic/2 .7b5 and Spyglass_Mosaic/2 . 11 

* incorrectly require the server to generate an opaque parameter 

* in www -Authenticate: headers using Digest authentication. 
•/ 

ltdefine EW_CONFI G_OPTI ON_BROKEN_NEED_OPAQUE 
/• 

* SANITY CHECKING 
* 

* Define EMWEB_SANITY to include extra sanity checking code during initial 

* integration and debugging. Code size may be reduced by not defining this. 
•/ 

*def ine EMWEB SANITY 



* 



/* 

♦ PORT -SPECIFIC DEFINITIONS 

ftdefine eva Alloc malloc 
^define ewaFree free 
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#defin EWA_N£T_HANDLE_NULL ( CEwaNetHandle) NULL) 

/• 

* Application- specific network handle cleanup function (ox macro) 

* Invoked by EmWeb/Server after each processing each HTTP request 

* before invoking ewaNetHTTPEndO . 

Jfifndef EW_ODNFIG_OPTION_FIL£__GET 

^define ewaNetHTTPCleanup( handle ) /* no cleanup necessary */ 
#endif 

/* 

* Application -specific Document handle 
*/ 

typedef void * EwaDocumentHandle; 

#define EWA_DOCUMENT_HANDLE_NULL ((EwaDocumentHandle) NULL) 

flifdef EW_CONFIG_OPTION AUTH 
/* 

* AUTHORIZATION 
• 

* The application may attach an application -specific handle to an entry 

* in the authentication database. .The C-type for this handle is defined 

* by the application below. 

V* 

typedef void * EwaAuthHandle; /* user handle to ID entry •/ 

^define EWA_AUTH_HANDLE_NULL { (EwaAuthHandle) NULL) 

flifdef EW CONFIG OPTION_AUTH DIGEST 
/• 

* Application -specific nonce parameters • these are used for Digest 

* authentication to generate one-time challenges. Recommended values 

* include the client's IP address (derived from the network handle), 

* a time -stamp, a server -side secret value, and other random bits and 

* pieces. The EmWeb/Server generates an MDS hash on these values (hiding 

* their semantics) to create the nonce value sent as challenges. 
•/ 

typedef struct EwaAuthNonce s 
{ 

uin t3 2 c 11 ent_ip ; 

uint32 times tamp; 

uint32 up_countei; 
# define EWA_AUTH_SECR£T_S I ZE 8 

chax secret (EWA^AUTH^SECRET^SIZE) ; 

} EwaAuthNonce; 

ftendif /* EW_CONFI C_OPTI ON_AUTH_DI GEST */ 

#endif /* EW_CONFIG_OPTION_AUTH */ 

/• 

* RAW CGI INTERFACE 
* 

* The application may attach an application* specific handle to a raw CGI 
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* TRACING AND LOGGING 
* 

* The following macros provide tracing and logging facilities using ANSI 

* printfO style arguments. 



^define EMWEB_ERROR(x> 
#define EMWEB~WARN(x) 
#define EMWEBJTRACE (x) 
#define ewa_LOG_HOOK 



printf x 
printf x 
/*pxintf x*/ 

/* define to include ewaLogHookO interface */ 



NETWORX BUFFERS 

The network buffer structure is defined by the application and used 
by the EtnWeb/Server . A network buffer could be an index into an array, 
a pointer to a buffer descriptor, etc. EmWeb/Server imposes only the 
following requirements on the application's buffer implementation: 

o Given a buffer, a pointer to the start of data may be determined, 

o Given a buffer, the number of bytes of data may be determined oi 

specified. The EmWeb/Server will never attempt to increase the 

size of a buffer . 

o Given a buffer, the next buffer on a singly linked list may be 

determined ox specified. 

The EwaNetBuffer structure is used by EmWeb/Server to represents a buffer 
descriptor. The value £WA_NET_BUFFER_NULL indicates a NULL buffer used to 
terminate a buffer chain or as a return value from EwaNetBuf fer Alloc 0 
indicating no buffers available. 



typedef struct EwaNetBuf fer_s 



{ 



struct EwaNetBuf fer_ 

uint8 

uint8 

uintf 



* next; 

* realdata; 

* data; 
length; 



} EwaNe tBuffer_t, * EwaNetBuffer; 



^define EWA NET BUFFER NULL 



((EwaNetBuffer) NULL) 



/* Buffer primitives • these may be macros or subroutines */ 



#de f i ne ewaNe tBuf f er Leng thGe t ( buf f er ) 
#define ewaNetBuf feiLengthSet (buf fer , len) 
ftdefine ewaNetBuf ferDataGet (buffer) 
^define ewaNetBuf ferDataSet (buf fer, da tap) 
ftdefine ewaNetBuf fexNextGet (buffer) 
tfdefine ewaNetBuf ferNextSet (buffer, nxt) 



(buffer) -> length 
(buffer) -> length - len 
(buffer) odata 
(buffer) *>data - da tap 
(buffer) ->next 
(buf fer) - >next ■ nxt 



* Application- specific Network handle 
*/ 

typedef struct EwaNetHandle_s EwaNe tHandle_t, • EwaNe tHandle; 
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* r qu sc. The C-typ for this handle is defined by the application below, 
•/ 

typedef void * EwaCGIHandle; 

Ifdefine EWA_CCI_HANDLE_NULL ((EvaCGIHandle) NULL) 
/• 

* LOCKING 

* The following macros must be defined to disable and enable .task preemption 

* to protect critical regions if more than one pre-emptive task may access 

* EmWeb/Server API functions at the same time. 
V 

#define EWA_TASK_LOCK ( ) 
ttdefine EWA^TAS K_UN LOCK ( ) 

/* 

* GLOBAL STATE 
*/ 

typedef struct EwsState_s *EwsStateP; 
/• 

* The ews_state is a pointer to global state information used internally 

* by EmWeb/Server. In some envi rone men ts, it may be desirable to maintain 

* multiple threads of EmWeb/Server within a single memory. To support this 

* functionality, ews_state may be overridden by a macro that expands at 

* run* time to different values. The only requirement is that the macro 

* returns type (EwsStateP) , and that the address of the pointer (&ews_state) 

* can be determined. For example: 

* #define ews state (* ( (EwsStateP*) somePunction (someArgument) ) ) 
•/ 

/• 

* LIBRARIES 



The EmWeb/Server implementation uses the following standard C library 
functions: 

sprintf - for converting decimal integers to strings, needed to 
generate Content* Length: HTTP headers. 

stzcpy - for copying null -terminated strings between the application 
and the EmWeb/Server (usually URL names) . 



stxcmp * for comparing null "terminated strings (comparing URL names) . 
strlen - get size of string 



Most embedded environments have these functions available in libraries. 
However, EmWeb /Server can be configured to provide its own internal 
implementations for this purpose. (Note that a general sprintf 
implementation is not provided. Instead, only a conversion routine from 
long integers to strings is needed. 

The following macros should be defined (#define) if the corresponding 
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* function is provided by the application environment. 
•/ 

*undef EMWEB_HAVE_SPRINTF 
#undef EMWEB JiAVE_STRCPY 
»undef EMWEB~HAVE~STRCMP 
flundef EMWEB~HAVE_STRLEN 
#undef EMWEB~HAVE_MEMCPY 
ftundef EMWEB_HAVE_MEMSET 
flundef EMWEB_HAVE_STRCHR 

/* If you have 'index* but not • strchr', define EMWEB_HAVE_STRCHR and 

* #define EHWEB_STRCHR < s , c ) index (s,c) 
•/ 

#ifdef EW CONFIG_OPTION_FILE 
/• 

* SERVER FILE SUPPORT 
* 

* For support of a server side file system. 
•/ 

typedef struct EwaFileHandle_s *EvaFileHandle; 
#define EWA_FILE_HANDLE_NULL~ ( (EwaFileHandle) NULL) 

•*if defined ( EW_CONFXG_OPTION_FILE_GET ) \ 

II defined ( EvTcONFIG_OPTION~FILE_PUT ) \ 

11 defined £ EW_CONFIg2oPTION_FILE_DELETE ) 
typedef void •EvaFileName; /* unused for now •/ 

#endif /• EW_C0NFIG_OPTI0N_FILE_xxx •/ 
#endif /* evT config~option~file •/ 

#endif /• " EW_config_H •/ 



A-2. Common Header Files 

The header files provided here may be included by application software and define the 
application interfaces to the EmWeb/Server. 

A-2.1. src/inc!ude/ews_api.h 

This is a master include file for EmWeb/Server which, in turn, includes all other 
application interlace header files. We recommend that applications include this file for 
ease of integration with future releases. 

/• 

* evs_api.h,v 1.12 1997/05/21 21:55:43 ian Exp 
# 

* Product: EmWeb 

* Release: R2_l 
* 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS. INC. 
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THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

Copyright (C) 1996, 1997 Agianat Systems, Inc. 
All Rights Reserved 



Agranat Systems, Inc. 
1345 Main street 
Waltham, MA 02154 

(617) 893-7868 

saieseagrana t . com, suppor t»agr ana t . com 
ht tp : //www . agrana t . com/ 
EmWeb/Server Application Interface 



flifndef 


_EWS_API_H 






^define 


~ews_api~h 






^include 


"ew_types.h" 




application-defined generic types 


#include 


"ew_conf ig.h" 


/* 


application -defined configuration 


^include 


M ews_def .h" 


/• 


general interface definitions •/ 


#include 


*ews_sys .h" 


/• 


system interfaces */ 


^include 


"ews_net.h M 


/• 


network interfaces •/ 


ft include 


"ews_doc.h" 


/• 


document interfaces */ 


^include 


M ews_auth.h M 


/• 


authentication inteifaces •/ 


^include 


M ews_cgi . h" 


/* 


CGI interfaces */ 


^include 


*ews_ctxt.h M 


/• 


context access interfaces */ 


#endif /• 


_EWS_API_H */ 







A-2.2. src/include/ews_def.h 

This file contains genera! definitions used throughout the EmWeb/Server application 
Interface. 



ews_def.h,v 1.26 1997/05/25 23:30:32 giusti Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARX OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 
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* Emweb/Server request context handle 
•/ 

typedef struct EwsContext_s * EwsContext; 

#define EWS_CONTEXT_NULL ((EwsContext) KULL) 

#ifdef EWA LOG HOOK 
/• 

* Status codes used foi logging requests 
*/ 

typedef enum EwsLogStatus e 



* 200 Request accepted 



EWS LOG STATUS OK, 



Request dispositions {after successful xequesc) 



•/ 

ews_log_status_no_content , 
ews_log~status~moved_permanently , 
ews~log_status_moved~temporarily , 
ews~log_status_see_other , 
ews log~status not~modifxed. 



/* 204 no-op form ox imagemap •/ 
/* 301 link •/ 
/• 302 redirect •/ 
/• 303 see other */ 
/• 304 not modified since */ 



* 4 01 Unauthorized 



ews_log_status_auth_failed , 
ews_loc~status_auth_forgery , 
ews_log~status_auth_stale , 
ews~log~status~auth_required , 
ews "log "status auth digest required, 



/* authorization failed */ 
/* bad message checksum */ 
/• authorization nonce stale */ 
/* authorization not present */ 
/* message digest not present •/ 



* 4 00 Bad Request 
•/ 

ews_log_status_bad_reouest , 
ews_log2status_bad~form , 
ews~log~status~bad~imagemap , 



/• HTTP parse error */ 
/* form data parse error */ 
/* imagemap query parse error */ 



* Additional errors 
V 

ews_log_status_not_found , 
ews_log"status"method_not_allowed , 

EWS~LOC_STATUS~LENCT*TrEOUIRED , 
EWS_LOG~STATUS_UNAVAILABLE . 
EWS_LOG_STATUS_NOT_IMPL£MENTED , 
EWS_LOG_STATUS_KO_RESOURCES , 
EWS LOC~STATUS INTERNAL ERROR 



/* 4 04 not found or hidden */ 
/• 4 05 method not allowed •/ 
/* 411 length required */ 

/* S03 aborted Document Fault * 
/* 501 bad method for URL •/ 

/* 500 insufficient resources 1 
/• 500 internal error */ 



} EwsLogStatus; 
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• Agxanat Syst ms. Inc. 

• 1345 Main Street 

« Waltham, MA 02154 
• 

• (617) 893-7868 

• salesffiagzanat.com, supportffiagzanat.com 



* http://www.agxanat.coEn/ 
* 

* EtnWeb/sexvei public definitions 
« 

tfifndef ews_def_H 
#def ine ~EWS~DEF_H 

typedef const char *EvsConstChaxP; 
/• 

* Status codes returned to the application by EmWeb/Server 
•/ 

typedef enum Ewsstatus e 
{ 

EWS_STATUS_OK, 
EWS_STATUS~BAD_MAGI C , 
* EWS_STATUS_BAD_VERSION, 
EWS_STATUS_ALREADY_EXISTS , 
EWS_STATUS_NO_R£S0URCES , 
EWS_STATUS JTN~USE . 

ews~statusj*ot_registered , 
ews~status~not~clonei> , 
ews~status~not~found , 
ews~status_auth_fail£d . 
ews_status_bad_state , 
ews~status_bad_realm , 
ews~status_fatal_error , 
e ws~s tatu s_ab0rted 

} EwsStatus; 

/• 

* Status codes returned to EmWeb/Server by the application 
•/ 

typedef enum EwaStatus e 
[ 

EWA_STATUS_OK, 

# ifdef EW_CONFiG_OPTION_SCHED 
EWA_STATUS_OKjriELD , " 

# endif 

EWA_STATOSJERROR 
) EvaStatus; 



* 
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* uincs •datap; 

} EvsFormFieldHexstring, *EwsFormFieldHexStringP; 
#endif /* EW_CONFIG_OPTION_FIELDTYPE - _HEX_STRING */ 

Uit (defined (EW_CONFIG_OPTION_FIELDTYPE_IEEE_MAC) \ 
M defined (EW_CONFTG_OPTION_FIEUrr?PE_FDDI_MAC) \ 
|| defined (EW^CONFIG^OPTION^FIELDTYPE^STD MAC) \ 
) 

cypedef uinc8 EwsFoxmFieldMACl6] ; 
tfendif /* MAC */ 

#ifdef EW_CONFIG_OPTION_FIELDTYPE_OID 
typedef struct EvsFormFieldObjectID_s 
I 

uint32 length; /* number of uint32's in datap */ 

uint32 *datap; /* array of uint32 l s repiesencing OID */ 

} EvsFozmFieldObjectID, *EvsFormFieldObjectIDP; 
#endif /• EW_CONFIG_OPTION_FIELDTYPE_OID ♦/ 

#if defined <EW_CONFIG_OPTION_FIELDTYPE_RADIO) 11 \ 
defined <EW~CONFIG~OPTION~FIELDTYPE_S£LECT SINGLE) 

/• 

* ews For mEnutnToS cring 

* Lookup scring corresponding co enutn from context 
* 

* context * context of request 

* enum • value of enumerator 
* 

* Returns string from corresponding HTML VALUE° field, or NULL if out of 

* bounds. 
*/ 

extern const char * evsFormEnumToString( EwsContext context, int value ); 
ftendif /• EWjTONFIGJDPTION_FIELDTYP£_RADIO | SELECT_SINGLE •/ 

ftendif /• EW_CONFIG_OPTION_FORM •/ 
/• 

* EwsRequestMethod 
* 

* This is an enum for supported request methods. Bit values are used so 
4 groups of valid request methods can be grouped into a single field 

V 

typedef enum EwsRequestMethod e 
{ 

evsRequestMethodUnknovn * 0x0000 /* all others */ 
,evsRequestMethodGet » 0x0001 /• GET */ 
,evsRequestMethodPost • 0x0002 /• POST •/ 
.evsRequestMethodHead • 0x0004 /• HEAD •/ 

f ifdef EW_CONFIG_OmON_METHOD_OPTIONS 

.evsRequestMethodOptions • 0x0008 /* OPTIONS */ 
# endif 

ft ifdef EW_O)NFIG_0m0N_METH0I>jrRACE 

.evsRequestMethodTrace • 0x0010 /• TRACE •/ 
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/• 

* ewaLogHook 

* Application logging h ok 
* 

* context • context of request being logged 

* status • logging status 
•/ 

ttifndef ewaLogHook 

extern void ewaLogHook (EwsContext context, EwsLogStatus status); 
#endif /* ewaLogHook */ 

Kelse /* EWA_LOG_HOOK */ 

tfdefine ewaLogHook (context, status) 

ftendif /• EWA_LOG_HOOK */ 

/• 

* EmWeb/Server archive descriptor* 
*/ 

cypedef struct EvsArchive_s * EvsAr chive; 
/• 

* ErnWeb/Seiver document handle 
•/ 

typedef struct EvsDocument_s • EvsDocument; 

#def ine EWS_DOCUMENT_NULL ( (EvsDocument) NULL) 

/• 

* EmWeb/Server opaque read-only data handle 
typedef const uintS EwsArchiveData [) ; 

/* 

* EmWeb /Server authorization handle 
•/ 

typedef struct EvsAuthHandle_s * EwsAuthhandle; 
ftdefine EWS_AUTH_HANDLE_NULL~ < (EwsAuthHandle) NULL) 

flifdef EW CONFIG_OPTXON FORM 
/* 

* Application form interface constants for status byte 
*/ 

^define EW_FORM_I NITIALI ZED 0x01 
fldefine EW>ORM~DYNAMIC 0x02 
#define EW^FORmTrETURNED 0x10 
^define EW~FORM~PARSE_£RROR 0x20 

#define EW_FORM_FILE_ERROR 0x20 /• equivalent to parse error */ 

/• 

* EmWeb/Server form element types 
*/ 

flifdef EW_CONFIG_OPTION_FIELDTyPE_HEX_STRING 
typedef struct EwsFormFieldHexString_s 
i 

uint32 length; 
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/ • 

* INITIALIZATION AND SHUTDOWN 
• 

* The EmWeb/Server must be initiali2ed at start-up before accepting requests, 

* installing document archives, or registering authentication information. 
* 

/ 

/* 

* ewslnit 

* Initialize EmWeb/Server 
* 

* Returns EWS_STATUS_OK on success, else failure code CTBD) . 
*/ 

extern EwsStatus ewslnit ( void ); 

Itifdef EW CONFIG OPTION CLEANUP 
/• 

* ews Shutdown 

* Graceful shutdown of EmWeb/Server terminating all requests in progress 

* and releasing all memory and buffers. 
• 

* Returns £WS_STATUS_OK on success, else failure code (TBD) . 
*/ 

extern EwsStatus ewsShutdown { void ); 
ffendif /• EW_CONFIC_OPTION_CLEANUP •/ 

ftifdef EW CONFIG OPTION SCHED 

/ 7 7 7 

* SCHEDULING 
* 

* The EmWeb/Server is capable of both multi - threading HTTP requests and 

* yielding execution control to the CPU. The following functions are provided 

* to give the application concrol over how EmWeb/Server schedules pending 

* requests. 
• 

/ 

/* 

* ewsRun 

* Reschedule request processing after control returned to application as a 

* result of returning EWA_STATOS_oxjriELD from ewaNetHTTPSendO , 

* ewaNetHTTPEndO , or ewaDocumentFault () , or as the value to the status 

* parameter in ewsResumeO . 
• 

* Returns EWS STATUS OK on success, else failure code (TBD). 

*/ \ . 

extern EwsStatus ewsRun ( void ); 
#ifdef EW CONFIG OPTION_SCHED_SUSP RES 
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tt endif 

* ifdef EW_CONFIC_OPTION_METKOD_PUT 
.evsRequestMethodPut « 0x0020 /* POT */ 

* endif 

# ifdef EW_CONFIG_OPTION_METHOD_DELETE 

, evsRequestMethodDelete » 0x004 0 /* DELETE */ 

# endif 

} EvsRequestMethod; 



#endif /• _EWS_DEF_H */ 



A-2.3. src/include/ews_sys.h 

This file contains definitions and prototypes of the system functions of the application 
interface. 

/• 

* evs_sys.h.v 1. 17.2.3 1997/06/02 23:46:39 giusti Exp 

* Product: EmWeb 

* Release: R2_l 

* CONFIDENTIAL AND PROPRIETARY .INFORMATION OF AGRANAT SYSTEMS , INC. 

* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING . 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS. INC. 

* Copyright (C) 2996, 1997 Agianat Systems, Inc. 

* All Rights Reserved 

* Agranat Systems, Inc. 

* 1345 Main Street 

* Waltham, MA 02154 

* (617) B93-7B68 

* salesttagranat.com, supportCagianat.com 

* http://ww.agranat.com/ 

* Emweb/Server system interfaces 
•/ 

Uifndef _EWS_SYS_H 
Udefine ~ews2sys~h 

^include "ev_types.h" 
^include **ew_conf ig.h" 
Ifinclude M ews def .h" 
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* Allocate a block of mem ry of ac least the requested number of bytes. 

* bytes * requested size of the memory block in bytes 
* 

« Returns a pointer to the fiist byte of memory, or NULL if no memory of the 

* requested size is available. 
•/ 

extern void * evaAlloc { uintf bytes ) ; 
ffendif 

aifndef ewaFree 
/* 

* ewaFree 

* Free a block of memory previously allocated by evaAlloc 0 
* 

* pointer - pointer to beginning of memory block (from evaAlloc 0) 
• 

* No return value 
•/ 

extern void ewaFree ( void * pointer ) ; 
Kendif 

*ifdef EW CONFIG OPTION DATE 



* TIME -OF -DAY MANAGEMENT 
* 

* If DATE support is enabled, the EmWeb/Server invokes the following 

* application -provided function to retrieve the current date for use in 

* Date: HTTP headers. Furthermore, the current date is also used in 

* Expire: and Last -modified: headers of dynamically generated documents 

* (i.e. HTML documents containing EMWEB extensions), if configured. 

* Note that the Last-modified: header of static documents use the archive 

* creation date stored in the archive by the EmWeb/Compiler . 



It ifndef ewaDate 
/• 

evaDate 

Return a string containing the current time-of-day in one of the HTTP 
standard representations as follows: 

RFC1X23: .(Preferred standard) 
Fri, 28 Jun 1996 15:57:28 GMT 

RFC850: (Used, but not preferred) 
Friday, 28-Jun-96 15:57:28 GMT 

asctime: (Allowed, but discouraged) 
Jun 6 15:57:28 1996 

/ 
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* ewsSuspend 

* suspend processing of the cunent request during an EmWeb callout function 

* (e.g. EmWebString. EmW bFormServe, ox EmWebFormSubmi t) . This function is 

* used in the implementation of proxies. 
* 

* Note that this does _not_ cause the server to stop processing requests; in 

* fact, it forces a flush of any partially filled buffer for the current 

* request and may process other pending requests. This just causes the 

* current callout to be marked as 'suspended*. When the current callout 

* returns, the result will be ignored - after evsResume (below) is called 

* for this same context, the callout will be repeated. 
* 

* context - context of request to be suspended 
* 

* Returns EWS_STATUS OK on success, else failure code (TBD) . 
extern EwsStatus ewsSuspend ( EvsContext context ) ; 

/• 

* ewsResume 

* Resume processing of a request previously suspended by ewsSuspend 0 . This 

* causes the request to be rescheduled, and the callout from which ewsSuspend 

* had been called will be reinvoked. 

* context • Context of suspended request to be resumed 

* status • EWA_STATUS_OK or EWA_STATUS_OX_YIELD . 

* Returns EWS STATUS_0K on success, else failure code (TBD) . 
V 

EwsStatus ewsResume ( EwsContext context, Ewastatus status ); 
*endif /• EW_CONFIGJDPTION_SCHED_SUSP_R£S */ 

#endif /• EW_CONFI G_OPTI ON_S CHED •/ 



* MEMORY MANAGEMENT 
* 

* The EmWeb/Server presumes that the target O/S has a dynamic memory 

* management capability roughly equivalent to the POSIX mallocO and free!) 

* functions. 
* 

* Alternatively, the application could create a static linked- list of memory 

* blocks of different sizes. Refer to the product documentation for 

* information about run- time memory requirements. 
* 

* The application is responsible for providing the following memory management 

* functions to the EmWeb/server . 



/ 



/ 



Uifndef ewaAlloc 
/• 

• ewaAlloc 
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extern const chai * evaDate ( void ) ; 
« ndif 

#endif /* EW_CONFIG_OPTXON_DATE •/ 
flifdef EW_CONFI G_OPTION_URL_HOOK 

/ * 

* URL REWRITING 
* 

* If URL rewriting support is enabled, the EmWeb/Server will invoke the 

* following function when each request has been successfully parsed, but 

* before the URL is looked up in the filesystem. The application can then 

* return a new (or the same) URL to actually serve. 
« 

* / 

tfifndef ewaURLHook 
/• 

* ewaURLHook 
« 

* context - context of request 

* url - requested URL 
• 

* Returns new URL, or NULL to cause abort. (Foi no-op, simply return uil) . 
* 

* Note: the application MUST NOT invoke ewsNetHTTP Abort from here! Return 

* a NULL pointer instead: 
• 

* The URL may be rewritten in place if the length is not increased; 

* if the returned pointer is not within the url parameter, the value is 

* copied by the server. 
•/ 

extern char * ewaURLHook ( EwsContext context, char *url ) ; 
* end if 

*endif /• EW_CONFI G_OPTI ON_LOG_HOOK •/ 
/• 

* Since content length of zero is valid, we cannot use zero to 

* indicate when the content length is unknown (eg. dynamic data). 

* Assuming nobody will ever try to send/receive a 4 gig document is 

* probably safe for now... 
•/ 

^define EWS_CONTENT_l£NGTH_UNKNOWN < <int32) -1) 
tfifdef EW CONFIG OPTION FILE 

/ 7 * 7 * 7 * 

* LOCAL FILE SYSTEM SUPPORT 
* 

* The following routines must be supplied to support the server's 

* local file system. 
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•/ 

cypedef union EwsFileParams_s 
I 

/• 

* fileField - for support of the form INPUT TYPE-FILE field. 

* The server fills out this structure, and passes it to 

* the application when the file is submitted 
*/ 

# ifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 
struct 

I 

const char *fileName; /* file name or NULL */ 

const char *contentType; /* MIME type */ 
const char *content£ncoding; /* content encoding or NULL */ 
const char *contentDisposition; /* Content -disposition: */ 
int32 contentLength; /* length or EWS_CONTENT_LENGTH_UNKNOWN */ 

J fileField; 

# endif /* EW CONFIG_OPTION_FI£LDTYPE_FILS •/ 



/• 

* filelnfo • for support for local file operations (GET, HEAD, OPTIONS, 

* PUT, DELETE) . This structure is setup by the application vhen a URL 
* * that corresponds to a local file is received. This structure 

* gives the server all it needs to know to handle the file operation. 
•/ 

« if defined ( EW_C0NFIG_OPTION_FILE_GET ) \ 
|| defined ( £Wj:ONFIG_OPTION_FILE~PUT ) \ 
|| defined ( EW~CONFIG_OPTIOn2fILE_DELETE ) 
struct 
{ 

EwaFileName fileName; /• file name topaque) */ 

const char •contentType; /* MIME type •/ 

const char *contentEncoding; /* content encoding or NULL */ 

const char *contentLanguage; /* content language or NULL */ 

const char «eTag; /• reserved, MUST BE NULL •/ 

const char "lastModif ied; /* modification time (RFC1123) or NULL */ 

const char -lastModif iedl036 ; /* modification time (RFC1036) or NULL •/ 

const char *realm; /* auth realm or NULL •/ 

int32 contentLength; /• length or EWS_C0NTENT_LENGTH_UNKN0WN */ 

EwsRequestMethod allow; /* reserved, MUST BE ewsRequestMethodGet */ 
/• HEAD & OPTION _always_ allowed by default */ 

} filelnfo; 

ff endif /• local file system GET/PUT/DELETE •/ 

char reservedl; /* prevent NULL union */ 

1 EvsFileParams, *EwsFileParamsP; 



/• 

* ewaFileCl se 
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* If -Modif ied-Since, If -Unmodified- Since, If-Match, 

* If -None-Match, or If -Range head rs. In this case, the 

* server will use the information given in the returned 

* params block to determine if the file should be retrieved. 
•/ 

extern EvaFileHandle 
ewaFileGet ( EwsContext context 
, const char *url 

, const EwsFileParams *params /• from ewsContextSetFile { ) */ 

); 

/* returns EWA_FIL£_HANDLE_NULL on error */ 
ftendif /* E W_CON F I G~OPTI ON~FI LE_GET •/ 

#endif /* EW_CONFIG_OPTION_FILE •/ 

#endif /• _EWS_SYS_H •/ 



A-2.4. src/include/ews_net.h 

This file contains the definitions and prototypes used by the networking functions of the 
application interface. 

evs_net.h,v 1.20.2.1 1997/06/15 03:03:18 giusti Exp 

Product: Emweb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS. INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

Copyright (C) 1996, 1997 Agianat systems, Inc. 
All Rights Reserved 

Agranat systems. Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) B93-7868 

sa les«a giana t . com , suppor t»agr ana t . com 
http : //vw . agranat. com/ 

EmWeb/Server application interface to network transport layer 

»/ 

#ifndef _EWS_NET_H 
#def ine ~EWS~NET_H 

^include -ew_types .h* 
#include "ev config.h" 
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* Closes the file and indicates success or failuze 
*/ 

extern void 

ewaFileClose ( EwaFileHandle handle, EwsStatus status } ; 

h 

* evaFileWrite 

* Write data to a file 
*/ 

extern sintf 

evaFileWrite ( EwsContext context 

, EwaFileHandle handle /• handle from ewaFileOpen */ 
, const uint8 *datap /* pointer to data */ 

, uintf length /* length of data ♦/ 

) ; 

/• returns bytes written, <0 on error •/ 
/• 

* evaFileRead 

* Read data from a file 
•/ 

extern sintf 

evaFileRead ( EwsContext context 

, EwaFileHandle handle /• handle from ewaFileOpen «/ 
, uinte *datap /• pointer to data buffer •/ 

, uintf length /« length of buffer */ 

) ; 

/• returns bytes read, o on EOF, <o on error */ 

#ifdef EW CONFIG OPTION FIELDTYPE FILE 
/• 

* ewaFilePost 

* For multipart/form-data file submissions. Before the application's 

* submit function is called, the server may invoke this function for 

* each received file as part of a <INPUT WPE*FXLE> element in the 

* form. If successful, the file handle will be passed to the 

* application's submit function at which point it is the application's 

* responsibility to close the file. 
•/ 

extern EwaFileHandle 
ewaFilePost ( EwsContext context 

, const EwsFileParams •params 

>; 

/ w returns EWA_FILE_HANDLE_NULL on error •/ 
#endif /• EW_CONFI G_OPTI ON^FIELDTYPE^FILE •/ 

ftifdef EW CONFIG_OPTION FILE GET 
/• 

* evaFileGet 

* When the server determines that the file set by ewsContextSetFile 

* should be served to the browser, this function is invoked to open 

* the file for reading. 
• 

* To support Conditional GET, Che request message may include 
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* When the EmWeb/Server compl t s a request, it invokes ewaNetHTTPEnd 0 . 
* 

* The application may abort a request at any time by invoking 

* ewsNetHTTPAbort () . * 



/• 

* ewsNetHTTPStart 

* Start a new HTTP request 
* 

* net_handle * application -specific handle representing request 

* Returns context for the request, or EWS CONTEXT NULL on failure. 
*/ 

extern EwsContext ewsNetHTTPStart ( EwaNetKandle net_handle ) ; 
/• 

* ewsNetHTTPAbort 

* Abort a previously started HTTP request. 

* context • context of request to be aborted 

* Returns EWS_STATUS OK on success, else error code (TSD) 
*/ 

extern EwsStatus ewsNetHTTPAbort ( EwsContext context ); 
/* 

* ewsNetHTTPReceive 

* Receive request data from the network. 
* 

* context - context of request to which received data applies 

* buffer - buffer containing received data 

* Returns EWS STATUS_OK on success, else error code (TBD) 
*/ 

extern EwsStatus ewsNetHTTPReceive ( EwsContext context, EwaNetBuffer buffer ); 

ftifdef EW_CONFIG_OPTION_SCHEI>_FC 

/• 

* ewsNetFlowControl 

* Mark context for flow control to avoid predicted congestion. ewsRunO will 

* place the context on the suspended list at the next opportunity and 

* continue by processing additional requests. 
* 

* context - context of request to be flow controlled 
* 

* Returns EWS STATUS OX. 
*/ 

EwsStatus ewsNetFlowControl ( EwsContext context ) ; 



/ 
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/« 



in a typical TCP/IP implementation, the application is responsible for 
listening to the HTTP TCP port (80) fox connection requests. When a 

oTSSirj^SS/i* " Ceiv ! d : the a PPli"tion accepts the connection 
on behalf of EmWeb/Server and invoke ewsNetHTTPStart () to inform the 
EmWeb/Server of the new request. 

EmWeb/Server assumes that the application maintains data buffers for 
the reception and transmission of TCP data. The only requirements that 
EmWeb/Server imposes on the buffer implementation is as rK~ 

1. Buffers can be uniquely identified by a buffer descriptor No 
assumptions are made about the actual structure of the buffer 
descriptors or their relationship to data. For example, a buffer 
descriptor could be an index into a table, a pointer to a 
structure (either contiguous or seperate from the data represented), 
etc. The application is responsible for defining the appropriate 
type for EwaNetBuffer and value for EWA_NET_BUFFER JWU. 

2. Buffers can be chained together. Given a buffer descriptor 

^ t blG " 9eC 01 set ^ " nexc bu «« in'th. chain- 
field. This is done by eweNetBuf ferNextSet () and 

ewaNetBufferNextGetO. Note that the buffer chain is terminated when 
the next buffer value is EWA_NET_BUFFER_NUI.L . 

3. Given a buffer descriptor. EmWeb/Server can determine the start of 
data in the buffer Additionally, EmWeb/Server may change the start 
lL*l? ff ln bu "« <2n.W<*/Server only changes the start of data in 
the buffer upward) . This is done by ewaNetBuff erDataoet <) and 
ewaNetBufferDataSetO . 

«. Given a buffer descriptor. EmWeb/Server can determine the size of 
contiguous data in the buffer. Additionally, Emweb/server may 
change the sire of the buffer (Emweb/Server only changes the 
size of the buffer downward). This is done by evaNetSuffexLengthGetO 
and ewaNetBuffexLengthSetO . »u"«i.engtneeEO 

5. Emweb/server may allocate a buffer by invoking ewaNetBufferAllocO - 

iL?riSn-f?! S ^ ilable ' thiS * Un «ion '«uxns EWA NET BUFFER NULL . 

Additionally. EmWeb/Server may release a buffer by invokina 
evaNetBufferFreeO . ' *«»o«ng 

As the application receives TCP data on an HTTP connection, it passes 
this data to the EmWeb/Server by invoking ewsNetHTTPReceiveO . 

The EmWeb/Server transmits TCP data on an HTTP connection by invokino 
ewaNetHTTPSendC) . The application may throttle EmWeb/SeTver by 
returning BWA_STATOS_OK_YIELD . This causes the EmWeb/Server to 
eave state and return control to the application. The application must 
invoke evsRunO to give the EmWeb/Server an opportunity to continue 
processing the request. 8 
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* ewsNetUnFl wControl 

* Resume previously flow conti oiled context 
* 

* context • context of request to be flow controlled 

* Returns EWS STATUS OK. 

EwsStatus ewsNetUnFlowControl ( EwsContext context ) ; 

#endif /• Etf_COmGJ)PTION_SCHED_FC •/ 

tfifndef ewaNetHTTPSend 
/• 

* ewaNetHTTPSend (Application) 

* This function must be provided by the application to accept data from 

* EmWeb/Server for transmission to a browser in response to a request. 
* 

* net_handle - application- specific request handle from ewsNetHTTPStart 0 

* buffer - buffer containing data to be transmitted 
* 

* Returns EWA_STATUS_OK on success, •EWA_STATUS_OK_YIELD on success and 

* request EmWeb/Server to yield CPU to application, or EWA_STATUS_ERROR on 

* failure. 
*/ . 

extern EwaStatus ewaNetHTTPSend 

( EwaNetHandle net_handle, EwaNetBuffer buffer ); 
#endif 
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Ififndef ewaNetHTTPEnd 
/• 

* ewaNetHTTPEnd (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to indicate the completion of a request after all response 

* data has been sent. 
* 

* net_handle - application -specific request handle from ewsNetHTTPStart () 

* Returns £WA_STATUS_OK on success, EWA_STATUS_0K_YIELD on success and request 

* EmWeb/Server to yield CPU to application, or EWA STATUS ERROR on failure. 
•/ 

extern EwaStatus ewaNetHTTPEnd ( EwaNetHandle net__handle ) ; 
#endif ~ 

ftifndef ewaNetBuf f erAlioc 
/• 

* evaNetBufferAlloc (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to request a network buffer to be used for sending data. 
• 

* Returns a buffer, or EWA_NET_BUFFER_NULL on failure. The length of the 

* buffer must be initialized to the number of bytes available for use 

* by EmWeb/Server. 
•/ 

extern EwaNetBuffer ewaNetBuffer Alloc ( void ); 
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•/ 

uinte * evaNetBuf ferDataGet ( EwaNetBuf fer buffer ) ; 
ft end if 

flifndef ewaNetBuf f erDataSet 
/• 

* evaNeLBuffei Data Set (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the pointer to the data contained in the buffer. 

* This function is only used to advance the start of data forward. 

* EmWeb/Server never moves this pointer backward. 
• 

* buffer - buffer descriptor 

* da tap - new start of data value 
* 

* No return value 
•/ 

void ewaNetBuf fexDataSet ( EwaNetBuf f ex buffer, uinte * da tap ); 
ftendif 

flifndef ewaNetBuf ferNextGet 
/* 

* ewaNetBuf ferNextGet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to get the next buffer descriptor in the buffer chain. 
« 

* buffer - buffer descriptor 
• 

* Returns next buffer descriptor, or EWA NET BUFFER NULL if end of chain. 
•/ 

EwaNetBuff ex ewaNetBuf ferNextGet ( EwaNetBuff er buffer ) ; 
ftendif 
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ffifndef ewaNetBuf fexNextSet 
/* 

* ewaNetBuf ferNextSet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the next buffer descriptor in the buffer chain. 
* 

* buffer - buffer descriptor 

* next - next buffer descriptor to be attached to buffer 
* 

* No return value 
•/ 

void ewaNetBuf ferNextSet ( EwaNetBuff er buffer, EwaNetBuf fei next ); 
ftendif 

tfifndef ewaNetLocalHostName 
/* 

* ewaNetLocalHostName (Application) 

* This function must be provided by the application, it is invoked by the 

* EmWeb/Server to build proper redirection (Locations headers. This can 

* be either a dotted IP address ox a fully qualified hostname. 
*/ 
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#endif 

#ifndef ewaNetBuf feiFiee 
/• 

* ewaNetBuf fer Free (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to release one or a chain of necwoik buffers (either from 

* ewsNetHTTPReceiveO or ewaNetBuf fer Alloc ()) . 
* 

* buffer - buffer (s) to be released 

* No return value 
V 

extern void ewaNetBuf fer Free < EwaNetBuf fer buffer ) ; 
#endif 

ftifndef ewaNetBuf ferLengthGet 
/* 

* ewaNetBuff erLengthGet (Application) 

* This function must be provided by. the application, it is invoked by 

* EmWeb/server to get the length of the data portion of this buffer fragment. 

* buffer - buffer descriptor 

* Returns length of buffer 
■•/ 

uintf ewaNetBuf ferLengthGet ( EwaNetBuf fer buffer ) ; 
#endif 

#ifndef ewaNetBuf ferLengthSet 
/• 

* ewaNetBuf ferLengthSet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the length of the data portion of this buffer fragment. 

* This function is only used to decrease the original length of a 

* buffer. EmWeb/Server never increases the length of a buffer. 
* 

* buffer - buffer descriptor 

* length - new length value 
* 

* No return value 
•/ 

void ewaNetBuf ferLengthSet ( EwaNetBuf fer buffer, uintf length ); 
# end if 

ftifndef ewaNetBuf fer Da taGet 
/* 

* ewaNetBuf ferDataOet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to get the pointer to the data contained in the buffer. 
• 

* buffer - buffer descriptor 
* 

* Returns pointer to data in buffer 



Copyright <D 1 997Agranat Systems, inc. Pag 1 1 6 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 



EmWeb 1 ™ Functional Specification . ]46 - 



const char * evaHetLocalHostName { EwsConcext context ) ; 
ftendif 

tfifndef ewaNetHTTP Cleanup 
/• 

* evaNetHTTPCleanup 

* This function must be provided by the application or defined as a 

* empty macro. It is invoked by EmWeb /Server when a request completes, 

* allowing the application to reset any processing state stored in the 

* network handle. Note that for HTTP l.l persistent connections, this 

* routine may be called several times for the same connection, as one 

* connection can be used for multiple requests. For the last request 

* on a connection, this routine will be called before ewaNetHTTFEnd is 

* invoked. 
* 

* Returns void. Note that the request context is undefined during 

* this call and cannot be accessed. 
•/ 

void evaNetHTTPCleanup* EvaNetHandle handle ); 
tfendif 

*endif /* EWS NET_H •/ 
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A-2.5. src/incIude/ews_doc.h 

This file contains the definitions and prototypes for the archive and document 
management functions of the application interlace. 

evs_doc.h,v 1.20 1997/05/21 21:55:44 ian Exp 

Product: EtnWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWE3 SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham. MA 02154 

(617) 893-7868 

saleseagr&na t . com , suppor tfiagrana t . com 
h ttp ; //www . agr ana t . com/ 

EtnWeb/Server application interface to document archives 

/ 
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Sifndef _ews_DOC_h 
#define ~EWS_DOCJJ 

^include M ew_types.h" 
^include to ew_conf ig.h M 
^include "evs def.h M 



/ • 

* ARCHIVE MAINTENANCE 

* The EmWeb/Compiler generates an archive of one ox znoie documents. Documents 

* can be HTML files, JAVA programs, graphical images, or any other information 

* resource addressable by a URL. Archives may be independently loaded or 

* unloaded into the EmWeb/Servei . 
* 

* In most applications, the entire set of available documents would be 

* compiled into a single archive and loaded at boot time. However, some 

* applications may desire to dynamically load archives at run- time as needed 

* in order to reduce memory requirements. In fact, some applications may 

* want to implement a scheme similar to page swapping under some operating 

* systems to cache an active set of documents in memory while storing other 

* documents in a secondary storage area. Such a secondary storage area 

* could be in FLASH memory, or on a remote server using TFTP or other 

* protocols to load documents at run -time. 
* 

* An Emweb archive consists of two components. First, there is the archive 

* data component containing the database of compressed documents, information 

* about how to construct dynamic documents at run* time, access controls, 

* etc. Second, there is the archive object component containing the run -time 

* object code used for the construction of dynamic documents, etc. 
* 

* Operating systems supporting the run- time loading and linking of object 

* code may offload both the data and object archive components to a secondary 

* storage area. Otherwise, only the data components would be offloaded 

* while the object components would be statically linked into the run-time 

* executable image. 
• 

* Each archive contains an archive descriptor in the object component. The 

* archive descriptor is referenced by a public symbol generated by the 

* EmWeb/ Compiler . In order to activate an archive at run -time, the 

* application must invoke ewsDocumentlnstallArchive {) with parameters 

* indicating the address of the data component and the archive descriptor of 

* the object component. The archive may be deactivated by invoking 

* ewsDocumentRemoveArchiveO . 



/• 

* ewsDocumentlnstallArchive 
• 

* Install a document archive generated by EmWeb/Compiler into EmWeb/Server 

* run* time database. 
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* d scriptor • public symbol of archive object component descriptor 

* da tap • point r to archiv data component 

* Returns EWS STATUS OX on success, else error code CTBD) 
V 

extern EvsStatus evsDocumen tins tallAr chive 

( EvsArchive descriptor, EvsArchiveData da tap }; 

#ifdef EW_CONFIG_OPTIO>J_CLEANUP 
/• 

* evsDocumen tRemoveAr chive 
* 

* Removes previously installed document archive from run* time database. 
* 

* descriptor - public symbol of archive object component descriptor 

* Returns EWS_STATUS_OK on success, else error code (TBD) 

extern EvsStatus evsDocumen tRemoveAr chive { EvsAr chive descriptor ) ; 

*endif /* EW_CONFIG_0P7I0N_CLEANUP */ 

/• 

* evsDocumentAxchiveName 

* Returns the archive name as stored in the archive by the EmWeb/Compiler . 

* or NULL on error . 
•/ 

extern const char - evsDocumentArchiveName ( const uintB *datap ),* 

/* 

* evsDocumentArchiveDate 

* Returns the RFC1123 date string stored in the archive header generated 

* by the EmWeb/ Compiler vhen the archive vas created, or NULL on error. 

* There is also a routine for the less preferred RFC1036 representation. 
•/ 

extern const char * evsDocumentArchiveDate ( const uintB * da tap ); 
extern const char * evsDocumentArchiveDatel036 ( const uintB • da tap } ; 

#ifdef EW_CONFIGJDPTION_DEMAND_LOADINC 

/ 

* DEMAND LOADING 
• 

* In order to implement on-demand archive loading, the application may 

* register document URLs vith the ExnWeb/Server vhich are valid but not 

* loaded. This is done by invoking evsDocumen tRegi s ter () . If a registered 

* document is requested, the EmWeb/Server vill notify the application by 

* invoking evaDocumentFault () . At this point, the application may load 

* a nev archive (possibly removing a previously installed archive to make 
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* room).. When the archiv containing the page is installed, the EmWeb/Server 

* vill automatically compl te processing the request. The request can be 

* aborted either immediately by returning EWA_STATUS_ERROR from the 

* ewaDocuinentFaultO function, or by invoking evsNetHTTPAboit 0 . 

* Once a document is registered, there is no need to re -register it in the 

* event that the corresponding archive is removed. EmWeb/Server remembers 

* that the document has been registered as dynamically loadable. However, 

* the application may deregister a document by invoking 

* ewsDocumentDeregister () . 



/* 

* evsDocumentRegister 

* Registers the URL of a document vith the run -time database indicating that 

* the given document is valid but not currently loaded into memory. 
• 

* url - local URL of document to be registered 

* handle * application -specific handle passed to e vaDocument Fault () 
* 

* Returns document descriptor, or Ews DOCUMENT NULL on failure. 
*/ 

extern EvsDocument evsDocumentRegistex 

( const char • url, EwaDocumentHandle handle ); 



/• 

* evsDocumentDexegistei 

* Unregisters a previously registered document from the run* time database 

* indicating that the given dynamically -loadable document is no longer valid. 
* 

* document - descriptor of document to be deregistered 
* 

* Returns EWS STATUS OK on success, else error code (TBD) . 
*/ 

extern EvsStatus ewsDocumentDeregister ( BwsDocument document ) ; 

ftifndef ewaDocumentFaul t 
/* 

« ewaDocumentFaul t (Application) 

* This function must be provided by the application, and is invoked by 

* EmWeb/Server vhen a registered document has been requested but is not 

* currently loaded into memory. 
« 

* context - context of request for document 

* handle application -specific handle from evsDocumentRegistex () 
* 

* Returns EWA_S TATU5_OK on success, EWA_STATUS_OX_YIELD on success vith 

* request for EmWeb/server to yield the CPU, or EWA_STATUS_ERROR on failure. 

* If failure status is returned, the request is aborted. Otherwise, the 

* request vill complete alter the document has been loaded into memory. 
•/ 

extern EvaStatus ewaDocumentFaul t 

( EvsContext context, EvaD cumentHandle handl ); 
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ftendif 

#endif /• EWj:ONFIGJ>mON_DEMAND_LOADING •/ 
Uifdef EW_CONFIC_OPTION_CLONING 

* 

* DOCUMENT CLOKING 
» 

* Documents may be cloned and assigned to a new URL. This allovs multiple 

* instances of a document to exist. An application-specific handle can be 

* used to identify an instance of a document from the request context. 

* The application clones a document by invoking evsDocumentClone () . The 

* cloned document may be removed by invoking evsDocumentRemove () . All 

* clones created from documents in an archive must be removed before the 

* archive can be removed. 

* / 

/* 

* evsDocutnentClone 

* Clone an existing document under a new URL in the database. 

w- 

* baseurl • URL of existing document 

* nevurl - URL of new cloned document 

* handle • application-specific handle available in request context 
* 

* Returns document descriptor or EWS DOCUMENT HULL on error. 
•/ 

extern EwsDocument evsDocumentClone 

( const char * baseurl, const char * nevurl, EwaDocumentHandle handle ); 

/• 

* evsDocumentRemove 

* Remove a previously cloned document from the database. 
* 

* document - document descriptor of previously cloned document. 
* 

* Returns EWS_STATUS_OK on success, else erroi code (TBD) . 
•/ 

extern EvsStatus evsDocumentRemove ( EwsDocument document ) ; 
ftendif /* £W_C0NFIG_OPTI0N_CL0NING */ 

tifdef EW CONFIG OPTION DOCUMENT_DATA 

* evsDocumentData 

* Retrieve pointer to rav data and data size from URL in archive 
* 

* uil • url of document 

* bytesp - output: size of document (as -is in archive) in bytes 

* datapp - output: pointer to start of document 
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#ifnde£ _EWS_AUTH_H_ 
#define ~EWS~AUTH_H_ 

#ifdef E WJTONFI G_OPTI ON_AUTH 

(♦include -ev_types.h- 
ftinclude -ew_conf ig .h- 



HTTP Authorization techniques are discussed in the HTTP specifications. 
Knowledge of these principles are essential for correct use of these ; 
authorization interfaces. 

One or more HTML documents can be assocated with a single -realm". A r«alm 
is a case- sensitive ascii string that defines a -protection space- for -,he 
associated document (s) . 

Each realm can have zero or more authentication entries associated with it. 
If a realm has no authentication entries, then it is considered 
-unprotected" by the server, and its acess will always be granted to any 
requesting client. 

For those realms with authentication entries, any client that attempts to 
access any document associated with that realm will be required to 
authenticate itself. To authenticate, the client must send authentication 
parameters that validate against at least one authentication entry for that 
document's realm. Clients that do not authenticate are not served the 
requested document. 

For example, assume a realm exists called -foo M . It has three 
authentication entries associated with it (2 using the "basic" scheme 
defined in the HTTP specification, and one other ficticious type) : 



REALM: "foo" 

Authentication Entry 1: 
Type: -basic- 
parameters: Username-"useri- 
Password- "guest" 
EwaAuthHandle : application* s entryl identifier > 

Authentication Entry 2: 
Type: -future- 
parameters: index»37 

cookie--B37I8U9" 
. token- -S37- 

EwaAuthHandle : application 1 s entry2 identifier > 

Authentication Entry 3: 
Type: -basic 1 * 

parameters: Username* -Sinclair - 
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* Returns EWS STATUS OK on success, else en or code (TBD) . 
•/ 

extern EvsStatus evsDocumentData ( const char * url 

,uint32 *bytesp 

, const uintB **datapp ); 
* end if /* EW_CONFIG_OPTION_DOCUMENT_DATA */ 

«ifdef EW_CONFIG_OPTI0N_DOCUMENT_SET_REALM 

#ifdef EW^CONFIG^OPTCON AOTH 

/• 

* evsDocumentSetRealm 

* Set or change authentication realm of document at run -time. 
• 

* url • url of document 

* realm - name of authentication realm, oz NULL (or MN ) to disable. 
* 

* Returns EWS_STATUS OK on success, else erioi code. 

extern EvsStatus evsDocumentSetRealm {. const char * uil, const char *xealm ); 

ftendif /• EW_CONFIG_OPTION_AUTH */ 

flendif /• EW~CONFIG~OPTION~DOOJMEirr_SET_REALM •/ 

#endif /* _EWS_DOC_H */ 

A-2.6. src/include/ews_auth.h 

This file contains the definitions and prototypes of the authorization and security functions 
of the application interface. 
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All Rights Reserved 

Agxanat Systems, Inc. 
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* Pas sword-" baby Ion" 

* EvaAuthHandle: (application's en try 3 identifier > 
• 

* When a client attempts to access a document associated with realm "foo", it 

* will need to authenticate against one of the above entries. Which one the 

* client authenticates against is at its disgression. 
* 

* When a client does authenticate against one of the above entries, the 

* EvaAuthHandle for that entry is stored in the current context for the 

* document (EwsContext) . The datatype of this EvaAuthHandle is 

* implementation- defined. 

** / 

/ ................. ......... -.— 

* Types & constants 

— */ 

* Defines che authorization schemes supporced by the Emweb server. 

* New schemes will be added as they are supported. 
•/ 

typedef enum 
{ 

n -ifdef EWJTONFIGJ3PTION_AUTH_BASIC 

evs Au thS chemeBa sic, 
If endif /• EW_CONFIG_OPTIONJttrTH_BASIC »/ 

If ifdef EW_CONrcG_OPTION_AOTH_DIG£ST 

evsAuthSchemeDigest, 
if endif /• ew_config_option_autk_i>igest •/ 

If ifdef EW_CONFIG_OPTION_AUTH_MBASIC 

e v s Au t hSchemeManua IBa sic, 
If endif /* EW_CONFI G_OPTI ON_AUTH_MBAS I C */ 

If ifdef EW_C0KFIG_OPTION_AUTH_MDIGEST 

ewsAu thS chemeManualDi ges t , 
If endif /• EW_CX>NFXG_OPTION_AUTH_MDIGEST •/ 

evsAuchMax Scheme /* count of supported schemes •/ 

) EwsAuthscheme; 



/• 

* this structure defines parameters fox all the supported 

* authorization types. New parameters vill be added in 

* to this structure in the future 
•/ 

typedef union 
{ 

Kifdef EW_CONFIGJ>PTION_AUTH_BASIC 

struct 
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{ 

char •userName; 
char 'password; 
} basic; 

#endif /• £Wj:ONFIG_OFTION_AUTH_BASIC */ 
#if defined (EW_CONFIG_OPTION_AUTH_DIGEST) 11 
defined (EW_CONFXG_OPTION_AUTH_MDIGEST) 
struct 

{ 

char * user Name ; 
char *passWord; 

# ifdef EW_CONFIG_OPTION_AUTH_DIGEST_M 

boolean digestRequixed; /• require client message data verificaticn */ 

# endif /* EW_CONFIG_OPTION_AUTH_DIGEST_M •/ 

} digest; 

#endif /* EW_CONFIG_OPTION_AUTH_DIG£ST M EW_CONFIG_OPTION_AUTH_MDIGEST •/ 

char reservedl; 
} EwsAuthParameters; 



* This structure represents a single authorization entry. 
•/ 

typedef struct 
I 

EwsAuthScheme scheme; 
EvsAuthParameters params; 

EwaAuthHandle handle; /♦ user defined •/ 
) EwsAuthorization; 



/ 

* Interfaces 

. ./ 



* evsAuthRegistex 

* And a new authorization entry to the realm. 
• 

* realm - Input, case sensitive asciiz realm name. 

* authorization - Input, buffer containing authorization entry information. 

* This buffer is free for use by the caller on return. 

* Returns a non-NULL handle to the authorization entry, or NULL on failure. 
*/ 

extern EvsAuthHandle evsAuthRegister 

( const char 'realm, const EwsAuthorization "authorization ); 



/• 
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* evsAuthRemove 

* Deletes a particular authentication entxy identified by handle. 
« 

* handle - Input, The handle that was returned by ewsAuthRegister 0 fox 

* this entry. 
* 

* Returns EWS_STATU£_OK on success, else failure code. 
*/ 

extern Evsstatus evsAuthRemove ( EvsAuthHandle handle } ; 
/• 

* evsAuthRealmEnable 

* Enables a realm to restrict access to documents (restricted by default) 
* 

* realm • Input, the realm to restrict 
« 

* Returns EWS STATUS OX on success, else failure code 
*/ 

extern Evsstatus evsAuthRealmEnable ( const char * realm ) ; 
/• 

* evsAuthRealmDi sable 

* Disables a realm causing documents in that realm to be generally accessible. 
• 

* realm - Input, the realm to restrict 
« 

* Returns EWS STATUS OK on success, else failure code 
V 

extern Evsstatus evsAuthRealmDi sable ( const char * realm ) ; 
/• 

* ewaAuthRealmOualif ier 

* Returns realm qualifier string to append to realm names, or NULL. 
•/ 

ftifndef ewaAuthRealmOualif ier 

extern const char * ewaAuthRealmOualif ier ( void ) ; 
ftendif /• ewaAuthRealmOualif ier */ 

ftif defined (EW_CONFIG_OPnON_AOTH_DIGEST) \ 

II defined (evTconfig_option"auth_mdicest) 

/• 

* evaAuthNonceCreate 

* Create raw input used to generate one-time authentication challenges 

* given a request context and realm. 
• 

* context • request context 

* realm - null -terminated string containing name of realm 

* noncep ■ pointei to appli cation* specif ic nonce parameters 
• 

* No return value 
*/ 

extern void evaAuthNonceCreate 

i EvsContext context, const char * realm, EwaAuthNonce *noncep ) ; 
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*/ 

tfifndef ewaAuthCheckBasic 

extern boolean ewaAuthCheckBasic ( EwsContext context 

, const char *realm 
, coast char *basicCookie 
, const char *userName 
, const char *password ); 

*endif /* ewaAuthCheckBasic */ 

*endif /* EW_CONFIGJ>PTIONJrtJTH_MBASIC •/ 



flifdef EW CONFI G__OPTC ON_AUTH_MDI GES T 
/* 

* ewaAuthCheckDigest 

* Given the current context, realm, username, and nonce, 

* return the corresponding MD5 hash of the username: realm: password 

* text. This text will be used by the server to verify the 

* authorization attempt by the client. 

* contexc ■ (input) request context 

* realm • (input) null -terminated, string containing name of realm 

* taken from the request header. 

* nonce * (input) null • terminated string containing the nonce that 

* was supplied to the server. 

* userName • (input) this parameter points to a null terminated string 

* containing the user name as supplied in the authorization 

* request header . 

* digest - (output) on return, -digest will point to a null- terminated 

* ascii text string representing the MD5 checksum of the 
username, realm and password <MD5 ( username ; realm: pa s s wor d) ) 
as described in the Digest Access Authentication RFC2069 

# 

* Return value: boolean, if TRUE, then ^digest points to a valid MD5 hash of 

* username :realm:password, which will be used by the server to complete 

* the authorization process {which may or may not be granted) . If FALSE. 

* the authorization is immediately denied. 
* 

* This function can be supended by ewsSuspendO . It's return values 

* are ignored, and it will be recalled with the same parameters when 

* the context is resumed using ewsResumeO. 
•/ 

flifndef ewaAuthCheckDigest 

extern boolean ewaAuthCheckDigest ( EwsContext context 

, const char *realcn 
, const EwaAuthNonce *noncep 
, const char •userName 
.const char **digest ); 

#endif /• ewaAuthCheckDigest ♦/ 

fiendif /* EW_CONFIG_OPT2 0N_AUTH_KDIGES7 •/ 



tfifdef EW CONFIG_OPTION_AUTH_VERIFY 
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/• 

* ewaAuthN once Check 

* Validate that the previously created nonce is valid given the current 

* request. 
• 

* context - request context 

* realm * null -terminated string containing name of realm 

* noncep - pointer to requested nonce parameters 

* count - previous use count (0, 1, ...) of nonce value 
• 

* Returns evaAuthMonceOK on success, ewaAuthNonceStale if valid but expired, 

* or ewaAuthNonceDenied if nonce is not permitted given the request context. 
•/ 

typedef enutn EwaAuthNonceStatus_e 
{ 

ewaAuthNonceOK, /* nonce value valid for request */ 
ewaAuthN once Last OK, /• nonce value valid, but won't be again */ 
evaAuthNonceStale, /• nonce value is stale, generate new nonce */ 
evaAuthNonceDenied /* nonce value is invalid •/ 
) EvaAuthNonceStatus; 

extern EwaAuthNonceStatus evaAuthNonceCheck 

( EvsContext context, const char realm, EwaAuthNonce *noncep, uintf count ) 
#endif /• EW_CONFIG_OPTION_AUTH_<M) digest •/ 

tfifdef EW CONFIG_omON_AUTH_MBASIC 

h 

evaAuthCheckBasic 

Given the current context, realm, base64 cookie, and optionally 
decoded username/passvord text, determine if the authorization should 
be granted ox denied. 

context • (input) request context 

realm • (input) null- terminated string containing name of realm 
basicCookie • (input) the base64 encoding of the text user :passwoxd, 

as described in the HTTP RFC . 
userName - (input) if £W_CONFIGJDPTI0NJVUTH_MBASIC_DEC0DE is defined, 
then this parameter points to a null terminated string 
containing the user name decoded from the basicCookie. If 
EW_CON FI G_OPTI ON_AUTH_MBAS I C_DECODE is not defined, this 
is a NULL pointer . - 
password - (input) if EW_CONFIC_OPTION_AUTH_MBASICJDECODE is defined, 
then this parameter points to a null terminated string 
containing the password decoded from the basicCookie. If 
EW_CONFIG_omON_AOTH_MBASICJ)ECODE is not defined, this 
. is "a NULL~pointei . 

Return value: boolean, if TRUE, then the authorization is granted and 
the document is served, otherwise, authorization is denied. 

This function can be supended by ewsSuspend ( ) • It's return values 
are ignored, and it will be recalled with the same parameters when 
the context is resumed using ewsResumeO. 
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* ev&AuthVerifySecuxicy 

* Called _af tei_ the server has determined chat the authorization 

* will be granted for the request, this function allows the application 

* to "short circuit" the authorization based on information about 

* the request (eg, IP address of client, etc.). The method used 

* to determine whether or not the request is authorized is proprietary 

* to the application. 
• 

* context * (input) request context 

* realm * (input) null- terminated string containing name of realm 

* taken from the request header. 
* 

* Return value: boolean, if TRUE, then the authorization is granted, and 

* the document will be served to the client. If FALSE, 

* the authorization is immediately denied. 
• 

* This function can be supended by evsSuspendO . It's return values 

* are ignored, and it will be recalled vith the same parameters when 

* the context is resumed using ewsResumet). 
*/ 

ffifndef ewaAuthVerifySecurity 

extern boolean ewaAuthVerifySecurity ( EvsContext context 

. const char * realm J; 

#endif /* ewaAuthVer if y security */ 
#endif /• EW CONFIG OPTION AUTH VERIFY */ 



/« 

Local Variables: *•* 
•»* mode: c 
•** tab-width: 4 **• 
*** End: 
•/ 

*endif /• EW_CONFIG_OPTION_AUTH •/ 
#endif /• _EWS_AUTH_H_ •/ 

A-2.7. src/indude/ews_ctxLh 

This file contains definitions and prototypes of the request context access functions of the 
application interface. 

/• 

* ©VS_CtXt.h,v 1.14 1997/05/25 23:30:32 giusti Exp 
• 

* Product: EmWeb 

* Release: R2_l 
* 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF ACRA1IAT SYSTEMS, INC. 
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* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS. INC. 

* Copyright (C) 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 

* Agxanat Systems, Inc. 

* 1345 Main Street 

* Waltham, MA 02154 

* (617) 893-7868 

* salesGagxanat.com, suppor teagianat .com 

* http://wwv.agranat.com/ 

* EmWeb/Server public definitions 
•/ 

flifndef _EWS_CONTEXT_H 
^define ^EWS^CONTEXT^H 

^include M ev_types.h" 
^include *ev_conf ig .h M 
^include M evs_def .h" 

/* 

* REQUEST CONTEXT 
* 

* Each HTTP request received by EmWeb/Server is assigned a unique context. 

* The context structure contains all the information pertaining to the 

* request, as veil as internal state information regarding the processing 

* state of the request. 
* 

* API functions are provided to give the application some visibility into 

* the current context state. 
*/ 

/* 

* evsContextNetHandle 

* Return the application -specific network handle provided to EmWeb/Server 

* by the application in evsNetHTTPStart () . 
*/ 

EwaNetHandle evsContextNetHandle C Eve Con text context ) ; 

«if defined (EW CONFIG_OPTI ON_DEMAND_LOADINC ) \ 
1 1 defined ?EW CONFI G_OPTI ON_CLONING ) 

/* 

* evsContextDocumentHandle 

* Return the application-specific document handle provided, to EmWeb/Server 

* by the application in evsDocumentRegieter 0 ox ewsDocuxnentClone 0 . 
•/ 

EvaDocument Handle evsContextDocumentHandle ( EvsContext context ) ; 
#endif /• EW CONFIG OPTION_DEMAND LOADING || EW CONFIG OPTION CLONING */ 
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#ifdef EW_CONFIG_OPTION_AUTH 
/* 

* evsContextAuthHandle 

* Return the application -specific authorization handle provided to 

* EmWeb/Server by the application in ewsAuthRegister 0 . 
•/ 

EwaAuthHandle ewsContextAuthHandle ( Ews Con text context ) ; 
#endif /• £W_CONFICJ)PTION_AUTH •/ 

ftifdef EW_COHFIG_OPTION SCHED_SUSP_RES 
/• 

* evsContextlsResuming 

* Return TRUE if EmWeb/Server is resuming (as a result of evsResumeO) after 

* the context was suspended (as a result of evsSuspend () ) . 
*/ 

boolean evsContextlsResuming ( EwsContext context ) ; 
#endif /* EW_CONFIG_OPTION_SCHED_SUSP_RES */ 

#if defined (EW_COKFIG_OPTION_STRXNG> || defined (EW_cONFIG_omON_INCLUDEi 

* ewsContextlterations 

* Returns the iteration count corresponding for EMWSB__ITERATE 
•/ 

uint32 ewsContextlterations C EvsContext context ); 

*endif /• EW_CONFIG_OPTION_STRING I | EW_CONFIG_OPTION_INCLUDE •/ 

# i f def EW_CONFIG_OPTION_COHTEXT_SEND_REPLY 
/• 

* evsContextSendReply 

* serves specified local path URL to browser in response to form submission 

* or raw CGI. 
•/ 

EvsStatus evsContextSendReply ( EvsContext context, char * url ); 
#endif /• EW_CONFIG_OPTION_CONTEXT_SEND_REPLY •/ 

#if defined ( EW CONFIG_OPTION_FILE_GET ) \ 
II defined! Ew2cONFIG_OPTION_FILE_PUT ) \ 
II defined ( EW~CONFIG~OPTION_FILE_DSLETE > 
EvsStatus evsContextSetFile( EvsContext context 

,EvsFileParamsP params 
) ; 

tendif /* EW CONFIG_OPTION_FILE_xxx •/ 



/• 

* The following" functions extract the corresponding fields from the KTTP/1.0 

* request header, if present, into an application -provided buffer. Each of 

* these functions return the number of bytes in the actual header value, even 

* if this is larger than the application -provided buffer (though EmWeb/Server 

* will not overwrite the applicatoin buffer by honoring the buffer length). 

* If the header is not present, 2ero is returned. The application may 

* specify a zero-length buffer in order to determine the size of the header 

* value. The returned value begins with the first non-vhi te space following 

* the HTTP header and ends just before the terminating end -of -line 
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* character (s) . 
flifdef EW_WNFIC_OFTION_CONTEXT_DATE 

uintf evsContextDate ( EvsContext context, chai •datap, uintf length ); 
tfendif /• EW_CONnG_OPTION_CONTEXT_DATE •/ 
#ifdef EW_CONFIG_OPTION_CONTEXT_PRAGMA 

uintf evsContextPiagma ( EvsContext context, chai *datap, uintf length ); 
Dendif /• EW_CONTIG_OPTION_C02TTEXT_PRAGMA */ 
flifdef EW_CONFIG_OPTION_CoihxXT_FROM 

uintf evsContextFiom { EvsContext context, chai • da tap, uintf length ) ; 
#endif /• EW_CONFI G_OPTI ON_CONTEXT_FROM */ 
«ifdef EW_CONFIG_OPTION_CONTEXT_IF~MODIFIED_SINCE 
uintf evsContextlfModifiedSince 

( EvsContext context, chai *datap, uintf length ); 
#endif /* £W_CONFIC_OPTION_CONTEXTJF_MODIFIED_SINC£ */ 
tfifdef EW_CONFI G_OFTI ON_CONTEXT_RTFERER 

uintf evsContextReferer ( EvsContext context, char *datap, uintf length ); 
#endif /• £W_CONnG_OPTION_CONT£XT_R£FERER •/ 
#ifdef EW_C0NFIG_0PTI0N_C0OTEXT_U5ER_AGEN^ 

uintf ews Con t ex tUsez Agent ( EvsContext context, char «datap, uintf length ); 
#endif /* EW_CONFI G_OPTI ON_CONT£XT_US £R_AG£NT •/ 
*ifdef £W_CONFIG_OPTION_COinEXT_HOST. 

uintf ewsContextBost { EvsContext context, chai *datap, uintf length ); 
#endif /• E W_CONFI G_OPTI ON_CONTEXT_H OS T */ 

#endif /• _EWS_C02TTEXT_H •/ 



A-2.8. src/include/ews_cgi.h 

This file contains the definitions and prototypes of the raw CGI functions of the application 
interface. 

evs_cgi.h,v 1.22 1997/03/29 17:50:49 ian Exp 

Pzoduct: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS* INC. 

Copyright (C) 1996, 1997 Agxanat Systems , Inc. 
All Rights Reserved 

Agianat Systems, Inc. 
1345 Main Street 
waltham, MA 02154 

(617) 893-7868 

salesttagzanac.com, suppoztdagranat.com 
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* http://vAw.agianat.com/ 

* EmWeb/Servex application interface to law CGI 
* 

•/ 

#ifndef _ews_cgi_h 
#def ine ~£WSjCGIJti 

^include **ew_types .h" 

/ * 

* CGI INTERFACE 
* 

* EmWeb supports a raw CGI interface for imagemap and various special 

* application-defined CGI capabilities. 
* 

* The EmWeb/Compiler creates CGI URLs from specifications provided in 

* _ACCESS files. The application provides two functions fox each CGI URL. 

* First, there is the CGI start function. This is invoked by the 

* Emweb/server to mark the start of a new CGI request. Second, there is the 

* CGI data function. This is invoked by the EmWeb/Servei one ox more times 

* to pass network buffers containing raw CGI request data to the application. 

* The end of request data is indicated by an EWA_NET_BUFFER_NULL EwaNetBuff er . 

* The CGI application uses the ewsCGIDataO function to transmit response data 

* to the network. 



/* 

* ewa CGI Start 

* This per -CGI function is provided by the application. It is invoked by 

* EmWeb/Server at the start of a new request to the corresponding CGI URL. 

* The application may return an application -specific handle. 
• 

* context • context of current request 
*. 

* Returns application-specific handle to be used by EmWeb/Server in 

* subsequent calls to ewaCGIData. 
•/ 

typedef EwaCGIHandle EwaCGIStart_f ( EwsContext context ); 
/* 

* ewaCGIData 
* 

* This per/ CGI function is provided by the application. It is invoked by 

* EmWeb/Server zero or more times to pass raw CGI request data to the 

* application. 
« 

* cgi_handle - application- specific handle as defined by ewa CGI Start 

* buffer - application buffer containing all or part of the raw CGI 

* request data 
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* document specified by the URL (if local), or with a r direct (if not). 

* This functi n will terminate the request. Note that this feature can not 

* be used in conjunction with ewsCCIDataO or evsCGIS tatus { ) . 



* Returns EWS_STATUS OK on success, else error code (TBD) . 

extern EwsS tatus ewsCGIRedirect ( EwsContext context, const chax *uxl ); 

#ifdef EW_CONFIG_OPTION_CGI_SERVER_SOFTWARE 
/* 

• ewsCGIServer Software 



* Returns a string corresponding to the server software such as 

* "Agranat-EmWeb/R2_l" 
*/ 

extern const char * ewsCGIServer Software ( void ); 
#endif /• EW_CONFIG_OPTIONJ^I_SERVER_SOFTWARE •/ 

#ifdef EW_CONFIG OPTION CGI_GATEWAY_INTERFACE 

* ewsCGIGatewaylnterface 
* 

* Returns a string corresponding to the CGI version "CGI/1. 0" 
*/ 

extern const char * ewsCGIGatewaylnterface ( void ); 
fcendif /* EW_CONFIG_OPTION_CGI_GATEWAY_INTERFACE */ 

#ifdef EW CONFIG OPTION_CGI_SERVER_PROTOCOL 
/* 

* ewsCGIServerProtocol 
* 

* context • context of request 

* da tap * pointer to data buffer 

* length * size of data buffer (may be zero) 
• 

* Returns number of bytes in actual protocol string, or zero if not present. 
*/ 

extern uintf ewsCGIServerProtocol 

( EwsContext context, char •datap, uintf length ); 
#endif /* EW_CONFIG_OPTION_CCI_SERVER_PROTOCOL •/ 

#ifdef EW CONFIG OPTION_CGI_REQUEST_METHOD 
/• 

* ewsCGIReque st Method 
* 

* context - context of request 

* da tap - pointer to data buffer 

* length - size of data buffer (may be zero) 



* Returns number of bytes in actual request method, or zero if not present. 



* context 

* url 



• context of request 

• URL for redirect 



* 
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* No return value 
•/ 

typedef void EwaCGIData_f ( EvaCGIHandle cgi_handle, EvaNetBuffei buffer ); 

#ifdef EW_C0NFIGJDPTION_CGI 

/• 

* evsCGISendStatus 

* This optional call causes the Emweb/Server to construct and send an 

* appropriate HTTP status header (and possibly other server -generated 

* headers). It must be followed by one or more calls to ewsCGIDataO to send 

* additional header information and optional body content. (Note that a call 

* to ewsCGIDataO must not precede the invocation of this function). 
* 

* Note: If the application desires complete control of the response, it may 

* simply send all header information itself using ewsCGIData () instead of 

* invoking this function. 
* 

* context - context of request 

* status * 3 -digit status code followed by reason string 

* string • string containing additional headers and/or data, or KUZ.L 
• 

* Returns EWS_STATUS OK on success, else error code (TBD) . 
*/ 

extern EvsStatus evsCGISendStatus 

{ EwsContext context, const char * status, const char * string ) ; 



* ewsCGIData 

* This function is called by a raw CGI application one or moze times to send 

* raw CGI response data to the biovsez client. The application is responsible 

* for throttling its use of the CPU. Note that response data may include raw 

* HTTP headers as veil as data. Therefore, a CR-NL sequence must be 

* transmitted to propel ly delimit the header portion of the response froir. 

* any returned data. 

* Note that evsCGISendStatus 0 may be called once before any calls to 

* ewsCGIDataO to generate standard HTTP headers. Otherwise, the application 

* must generate all standard headers itself. 

* Note that sending a EWA_NET_BUFFER_NULL terminates the request. 

* context - context of request 

* buffer • buffer containing data to send, or Ewa_NET_BUFFER_NULL 

* if this is the last buffer in the response? ~ 

* No return value 

extern EvsStatus ewsCGIData ( EwsContext context, EvaNetBuf fer buffer ) ; 
/* 

* evsCGIRedirect 

* This call causes the EmWeb/Server to respond to the browser with the 
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extern uintf wsCGIRequestMethod 

{ EwsContext context, char *datap, uintf length ); 

*endif /* ew_conf7g_option_cgij^ouestj*ethod •/ 

#ifdef EW CONFIG OPTION CGI_PATH INFO 
/• 

* ewsCGIPathlnfo 
* 

* context - context of request 

* Returns pointer to Pathlnfo string, 01 NULL if not present 
V 

extern const char * ewsCGIPathlnfo ( EwsContext context ); 
tfendif /* EW_CONFIG_OPTION_CGI_PATH_INFO */ 

#ifdef EW_CONFIG_OPTION CGI SCRIPT_NAME 

* evsCGIScriptName 

* context • context of request 

* Returns pointei to script name string 
*/ 

extern const char * evsCGIScriptName* ( EwsContext context ) ; 
#endif /• EW_CONFI G_OPTI ON_CGI_S CRI PT_NAME */ 

Itifdef EW CONFIG_OPTION CGI_0UERY STRING 
/* 

* evsCGIOueryString 
• 

* context • context of request 

* da tap * pointer to data buffer 

* length • size of data buffer (may be zero) 

* Returns number of bytes in actual query string, or zero if not present. 
•/ 

extern uintf evsCGIOueryString 

( EwsContext context, char *datap, uintf length ) ; 
#endif /• EWj:ONFIG_OPTION_CGI_0UERY_STRING •/ 

#ifdef EW C0NFIC_0PTION CGI CONTENT TYPE 
/* 

* evsCGIContentType 
• 

* context - context of request 

* da tap • pointer to data buffer 

* length - size of data buffer (may be zero) 

* Returns number of bytes in actual content type, or zero if not present. 
*/ 

extern uintf evsCGIContentType 

( EwsContext context, char *datap, uintf length ); 
flendif /• EW_CONFIG_OPTION_CGI_CONT£NT_TYPE */ 
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#ifdef EW_CONFIG OPTION CCI_C0NTENT LENGTH 

/• ~ 

* evsCGIContentLength 
* 

* context - context of request 
* 

« Returns content length as specified by client, or zero if not present, 

* or EWS_CGI CONTENT LENGTH_CHUNKED if chunked. 
•/ 

tdefine EWS_CGI_CONTENT_LENGTH_CHOTKED Oxf fffffff 
extern uint32 evsCGIContentLength ( EvsContext context ) ; 
ffendif /• EW_CONriG_OPTION_CGI_CONTENT_LENGTH •/ 

#ifdef EW CONriG_OPTION_CGI_CONTENT_ENCODING 

* evsCGIContentEncoding 
• 

* context • context of request 

* datap - pointer to data buffer 

* length * size of data buffer- (may be zero) 
* 

* Returns number of bytes in actual content encoding, or zero if not preaent. 
•/ 

extern uintf evsCGIContentEncoding 

{ EvsContext context, char *datap, uintf length ); 
#endif /• EW_CONFIG_OPTION_CGI_CONTENT_EN CODING •/ 

#endif /• EW_CONFIC_OPTION_CGI •/ 

#endif /• EWS CGI H «/ 
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EwaCGiData_f *data_f; 
] QnWebCGITable, •EmWebCGITableP; 

typedef struct Ews Archive_s 

1 uint32 magic; /• Magic number for archive validation •/ 

# define EW^CHIVEL_0BJECT_>1AGIC (('E'«24)i('W'«16)|('0'«8)|'b') 

uinte version^naj; /* Archive version (major /mi nor) */ 

uintB versioxumin; 

# define ew_archive_versioioiaj l 
ft define EW_ARCHIVE^VERSION_MIN 1 

uintB compiler_jnaj ; /* EmWeb/ Compiler version (major /minor) */ 

uint8 compiler_jain; 

ft define EW_JtflCHIVELPATE_1123_SIZE 32 

char date_1123 [EW^ARCKIVELJ)ATEU1123_SIZE) ; /• creation date */ 

/• 

• Archive-specific <EMWEB_STRING> dispatch function. Takes context 

* and index arguments, index selects -he C-code fragment corresponding 

* to an instance of <EMWEB_STRING> . 
•/ 

EmWebS tring_f • emweb_s tring ; 

/• 

• Archive-specific <EMWEB_INCUJDE> dispatch function. Takes context 

• and index arguments. Index selects the C-code fragment corresponding 

♦ to an instance of <EMWEB_INCLUDE> . 
•/ 

EmWebInclude_f • emweb_include ; 

/• 

* Archive-specific form table. The Form node index is hierarchical and 

* contains a form number and an element number. The form table is 

* indexed by form number (0..n-l). Each form table entry contains a 

• pointer to an array of field elements indexed by one less than the 

* element number. (An element number of zero starts the form, and 

* an element number greater than the number of elements in the form 

• ends the form) - The table contains all the necessary information to 

• serve and submit forms. The emweb.f om\_enunutable is a list of strings 

* corresponding to RADIO and single SELECT values. 
• •/ 

const EwFormEntry •emweb_f orm_table; 
uint32 emweb^f onrutable^size; 

const char ••emweb_fomuenunutable? 
uint32 emweb_f orTTuenuirutable_size; 

/* 

♦ Archive-specific imagemap table. The table represents imagemaps 

• compiled by the BnWeb/Compiler into the archive. This table is 

• indexed by a document node corresponding to the mapfile. The 

• table entry contains a table of rectangular regions which are scanned 

* for matching x,y coordinates to find a match. 
«/ 

const EwImageMapTable •emweb.J.mage_table; 
uint32 emweb_image_table_s i ze ; 

/* 

* Archive-specific CGI action dispatch table. 
•/ 
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/• 

* *Id: ew_db.h,v 1.30 1997/06/28 11:59:50 ian Exp $ 

* Pr duct: EmWeb 

* Release: $Name: $ 
• 

* %CopyRight% 

* EmWeb database definitions 
•/ 

tfifndef _EW_DB_H 
^define _EW_DB_H 

^include •ew_common.h" 
* include "ew_types.h" 
^include • , ew l _fo^m.h* , 
^include p ew_imap.h M 
# include "ews__def .h" 
^include "ews_cgi.h" 

/ 

* DOCUMENT ARCHIVE 
• 

* An EmWeb document archive contains two parts. These are the archive data 

* component and the archive object -component. 
• 

* The archive object component contains all the run-time object code 

* associated with an archive. A public symbol (determined by EmWeb/ Compiler 

* on a per-archive basis) points to an archive descriptor (EwsArchive) . This 

* contains all of the linkage required by the Emweb/Server to access the 

* archive-specific run- time object code. 

* The archive data component contains all the static data describing 

* individual documents in the archive. The data component is an endian- 

* independent fully relocatable contiguous block of constant data 

* analogous to a file. In fact, it could be a file. The data component 

* begins with an archive header and contains one or more documents. 
/ 

/• 

* Archive Descriptor 
• 

* Each archive has a unique archive descriptor in the object component of the 

* archive. The archive descriptor is a list of functions called by the 

* EmWeb/Server to execute archive-specific object code while processing 

* requests for documents in the archive. Unsupported functions (i.e. 

* features not selected when the Bnweb/Compiier was built) are represented 

* by a NULL pointer. 
•/ 

typedef const void ♦ BnWebString_f { Ewscontext context, uint32 index ) ; 
typedef const char * Bnweblnclude_f ( EwsContext context, uint32 index ) ; 

/* Cookie Attribute structure* element of emweb_cookie_tbl [] •/ 
typedef struct EwCookieAttr_s { 

char 'name; 

char *path; 
) EwCookieAttributes; 



typedef struct EmWebCGITable^s 
( 

EwaCGIStart^f •start^.f ; 
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const BnWebCGITable *emweb_cgi_table; 
uint32 emweb_cgi_table_size; 

/• 

* Reference count - this is initialized to zero by the Qnweb/Compiler, 

* but is writable (.data section). This value is incremented for each 

* cloned page It is also incremented for each page currently in use by an 

* uncompleted request. This prevents the application from attempting to 

* remove an archive that is in use. 
•/ 

uint32 ref erence_count ; 



* Document list - this is the anchor of a list of loaded documents and 

* is used exclusively by QnWeb/Server to keep track of per-document nodes 

• created when loading the archive into the open hashed file system. 

• This should be set to EWSJO CUMENT_JJULL by the Emweb/ Compiler. 
V 

EwsDocument docu»ent_list; 
/• 

* Archive-specific cookie table. This table is indexed by data_offset 

♦ value find in the cookie header node. 
* 

• !i!NOTE: location of this variable is important. For bacward comatibility 

* of archives, it MUST be the last field in this structure. 
•/ 

const EwCookieAt tributes •emweb_cookie_tbl ; 



) EwsArchive_t; 
DOCUMENT ARCHIVE DATA COMPONENT 

The document archive data component is a relocatable, endian-independent, 
static data structure containing compressed documents and information about 
how to access them. 

All 16-bit and 32-bit quantities are represented as arrays of octets. The 
first octet is the most significant (i.e. Big Endian) . 

All pointers are 32-bit (array of four octets) offsets from the beginning of 
the archive data. 

All strings are .asciiz C\0 # -terminated ASCII) and are represented by a 
pointer to the string. 

Data storage for strings and various other variable-length components can 
be placed between headers at the discretion of the EmWeb/Compiler. 

The document archive data component takes the following form: 

EwsArchlveHeader 
(optional padding) 

( EwsDocumentHeader { EwsDocumentNode, ... ) (optional padding) ), ... 

The. optional padding can be used to store variable length fields such 
as strings , compressed documents, etc. 

/ 



EwsArchiveHeader 

The archive data component begins with an archive header at offset zero 
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• NOTE WELL: KEEP S 1 2 EOF_EWS_AR CHI VE_HEADER UP TO DATE! I I 
•/ 

typedef struct EwsArchiveHeader_s 
{ 





uint8 


magic L4 J ; 








define 


EW_*RCHIVE_>1AGI C_0 


'E' 




# 


define 


EW^ARCHIVEu-MAGI C_l 


'W 






define 


EWLARCHIVELJ1AGIC.2 


'd' 






define 


EW_ J fcRCHTVTL#AG 1 C_3 


'a' 




* 


define 


EW^ARCHIVE_MAGIC 


((' 


E'«24) | CW'«16) | <*d'«8) l'a') 




uint8 


version_ma j ; 


/* 


Archive version (major /minor) */ 




uint8 


version_min; 








uint8 


campiler_maj ; 


/• 


Emweb/Compiler version (major /minor) */ 




uint8 


compiler_ - min; 








uintB 


length (4] ; 


/* 


length of archive, octets •/ 




uintB 


naroe_of f set [4] ; 


/* 


Offset to archive name string */ 




uinte 


date_1123_offset[4) 


; /* Offset to HTTP date (RFC1123 format) 




uintB 


date^l036_offsetl4] 


; /• Offset to HTTP date (RFC1036 format) 




uintB 


doc_of f set [4] ; 


/• 


Offset to first document header •/ 




uintB 


dict_off set 14 3 ; 


/• 


Offset to compression dictionary •/ 



} EwsArchiveHeader, * EwsArchiveHeaderP; 



ftdefine SIZEOF_EWS_ARCHlVE_HEADER 32 /• never use sizeof () •/ 



EwsDocumentHeader 

For each document in the archive, there is a corresponding document 
header. The first document header is referenced by the doc_offset 
field of the archive header. Subsequent documents are chained together 
using the next_offset field in each document header. The last document 
header in the archive contains a zero in the next_offset field. 



The following types of documents are supported: 

Link - Generates a redirection URL. The redirection URL is an 

uncompressed string stored in the data area. node_count 
should be zero. 



Mime - Generic (non-text) mime type. The data area contains the mime 

document. The mime content is indicated by the string at 
mime_offset. Compression is optional, node.count should be 
zero. 

Text - Generic text type. The text may contain EmWeb/Compiler 

HTML extensions for <EMWEB_STRING> , <EMWEB_INCLUDE> , 
form get processing, etc. Each such extension results in 
one or more document nodes being present describing the 
actions to take at certain points during the processing of 
the data. The data contains the static parts of the 
document and may optionally be compressed. The mime content 
is indicated by the string at mime_of f set. 

Index - An index URL. An absolute path URL is stored as an 

uncompressed string in the data area. node_count should be 
zero* 



Form - A form action URL. There should not be a data section. 

There will be a FORM node that indicates the index to 
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use for the start/set/submit operations in handling a 
posted form. 



CGI - A CGI URL. There will be a CGI node that indicates the 

index to use for the start/data operations in handling a 
raw CGI request. An optional data section containing 
the uncompressed content of the corresponding URL file 
Cif present) is made available in the Ews Con text. This 
could be used for CGI imagemap data, for example. 

Imagemap - A mapfile URL. There will be an imagemap node that 

indicates the index into a per-archive imagemap table 
for processing an imagemap. 



Note that any document might be marked hidden. If so, the document is 
not accessible by a client browser directly. Instead, the document is 
used as a building block. It can be cloned, or EMWEB_INCLUDEd . 



• NOTE WELL: KEEP SIZEOF_EWS_DOCUM£NT_HEADER UP TO DATE!! 
•/ 

typedef struct EwsDocumentHeader_s 
i 

uintB next_offset [4) ; /* offset to next document or 0 if last ♦/ 

uint8 url_offset [4] ; /• offset to URL string */ 

uint8 document. type; /* type of document */ 



/* If you add a document type, upda 
% define EW^CHIVEJDOC_TYPE_MASK 

# define EW_ARCHIVEL-DOCLTYPE_LINK 

# define EW_^CHIVE_DOQ_TYPE_JIIME 
/ • EW_JUlCHIVE_DOC_TYPE_TEXT 

# define EW_ARCHIVE_DOC_TYPE_FORH 
tf define EW^ARCHIVE.DOC.TYPE_INDEX 

# define EW^ARCHr^poc^TyPE^CGI 

tf define EVLARCHrVE_DOq_TYPE.IMAGEMAP 
define EW_ARCHIVE_DOC_TYPE_FILE 

# define EW_ARCKIVE_DOC_FLAG_STATIC 
M define EW_ARCHlVE_DOC_FLAG_FORM 

# define EW_archive_POC_flac_hidden 



xe . . /compiler/readarchive. c •/ 



OxOF 


/• 


type field */ 


0 


/* 


redirection URL */ 


1 


/• 


generic mime data type */ 


2 


* 


lobsolete] */ 


4 


/• 


Form action URL •/ 


5 




/♦ index URL */ 


8 


/* 


CGI-BIN interface */ 


9 


/• 


Imagemap interface •/ 


10 


/• 


local filesystem */ 


0x20 


/* 


treat as static document */ 


0x4 0 


/• 


contains form node */ 


0x80 


/• 


hidden (internal use) */ 



uintS 



comp_method; 



/• compression method */ 



* define ew_>rchivel_compression_none 0 
« define ew_archive_compression_emweb 1 

« define EW_>RCKrV^.COMPRESSI0H.DEFAULT EW_^CHIVE_COMPRESSION_EMWEB 



uint8 
uint8 

uint8 
uintB 

uint8 
uint8 
uint8 

uint8 
uint8 



node_count 12] ; /• number of document nodes */ 

node_off6et[4) ; /• offset to array of document nodes •/ 

mime_o£fset [4J ? /• offset to mime content type string */ 

realiruof fset [4] ;/* offset to authentication realm string •/ 

origulength[4] ; /• length of original (uncompressed) data V 

data. length [4] ? /• length of compressed data •/ 

data_offset [4] ? /• offset to compressed data •/ 



hdr_node_count ? / 1 
bdr_flags; /* 



number of document header nodes */ 
header specific flags 



# define EW^CHIVELPOCLJJDJUCOOKIE^FLG 0x01 

* define EW^ARCHIVEJDOCLJIDR-CACHE^FLG 0xD2 
ft define EW^RCKIVE_DOC_HDRJVARy_FLG 0x03 



/• set if COOKIE hdr present •/ 
/• set if CACHE hdr present •/ 
/• set if VARY hdr present •/ 



uint8 



reserved 12) ; 
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# define EW.DOCUMENTJIDIL-SEamE 0x02 /* SECURE flag for cookie •/ 

uintB reserved [2]; /• reserved for future use */ 



uincS 



index [4] ; 



/* index assigned to node. This may be 
hierarchical, (e.g. the FORM index 
contains a form number and element 
number, the STRING index contains 
a conversion type (most significant 
B bits) and a string number (least 
significant 24 bits) . 

The COOKIE index contains string number 
for cookie's value generating C-code. 
This index is applied to the switch contained 
in emweb_string() function */ 

} EwsDocumentNode, * EwsDocumentNodeP; 

^define SIZEOF_EWS_DOCUMENT_NODE 12 /♦ never use sixeof */ 
^define NEXT_DOCNODE ( x ) ( (EwsDocumentNodeP) (( <uint8 *)<x)) \ 

+ SIZEOF_EWS_DOCtfl*ENT_NODE) ) 

#endif /• _EW_DB_H •/ 
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} EwsDocumentHeader, • Ews Document Header P; 

ftdefine SIZEOF_EWS_DOCUMENT_ HEADER 40 /• never use sizeof ♦/ 
ews Document Node 

The document header points to an array of zero or more document nodes 
followed by header nodes. 

The node_count field of the document header indicates the number of nodes 
present. Each node represents a special run-time action to be taken by the 
Emweb/ Server when processing requests for the document. When processing 
reaches the specified point in the uncompressed data, the specified action 
is taken. 

Header node contains information needed to create HTTP reply header(s). 
The hdr_count field of the document header indicates the number of hdr.nodes 
present. Each node represents a special run-time action to be taken by the 
Emweb/Server when processing requests for the document. Header nodes are processed 
first as the headers are built into the reply befor data part of the document 
is processed. 

Header nodes are sorted in the archive by type. Compiler sorts and includes 
in the archive only headers of the types for which the flag is set in hdr_flags 
field in the Document Header. 

The document header node(s) immediately follow the ewsDocumentNodes for a 
given document. 

For a cache control header, the first offset in the node will be used to 
point to the ETAG for this (static) document. ETAGS are used for 
cache-control in HTTP 1.1. (Note that an ETAG will not be used for a 
dynamic document) . 

The type field will indicate what type of header node it is - cache or 
state cookie, etc. 
The other fields are reserved. 

Note that in the future, we may use the last 32 bits in this header 
to be an instance C pointer for the cache control header. 

NOTE WELL: KEEP SIZEOF_EWS_DOCUMENT_NODE UP TO DATE! ! 1 

typedef struct EwsDocumentNodes 
{ 

uint8 data_of f set U) ; /• location of node in uncompressed data 

stream (relative to start of uncompressed 
document data) , 

for COOKIE header it is an index to Cookie Table 

•/ 

uintB type; /* type of node */ 

/♦ If you add a node type, update . ./compiler/readarchive.c */ 

ft define EW_£0CUM£NT_ji0DE_TYP5_STRING 1 /* <EMWEB_STRINC> •/ 

ft define EW_DOCUMENT_NODE_TYPE«INCLUDE 2 /• <EMWEB_INCLUDE> •/ 

ft define EVLJ>OCIMENT^ODEJITPS_FORM 3 /• <FORM> operation •/ 

ft define EW_poCUMENT_NODE.TyPEL.CGI 4 /♦CGI operation •/ 

ft define EW^0CUMENT^0DE_TyPELJMACEMAP 5 /* Image Map •/ 

ft define EW_D0CUMIOT_N0DEL.TYPE_C00KIE 6 /♦ <EMWEB_COOKIE> •/ 

ft define EW ^OCUMENT_JJODE_TYPE_CACHE 7 /* CACHE •/ 

ft define EWJ)OCUMENT_N0DEL.TyPEjVARY 8 /• content negotiation*/ 

uint8 attributes; /• node attributes •/ 

/♦ If you add a node attribute, update ../compiler/readarchive.c •/ 
ft define EW_j>OCUMENT_JK>D5_KEPEAT 0x01 /♦ repeat until NULL for 

EMWEB.STRING and 
EMWEB_INCLUDE nodes •/ 
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/• 

* $Id: ew_form.h,v 1.23 1997/06/28 11:59;50 ian Exp $ 
• 

* Product: EmWeb 

* Release: $Name: $ 
* 

* %CopyRight% 
* 

* Emweb Form definitions between server and generated code. These are 

* also used in typed EMWEB_STRINGs , etc. 
• 

flifndef _EW_FORM_H 
tfdefine _EW_F0R*O! 

^include ■ew.types.h" 
^include "ew_coiwnon.h B 
^include -ews_def.h" 

/• 

* Application Form Serve Function 

* Fills in form template with default values. (We comment out the prototype 

* to avoid compiler warnings — the actual application functions define 

* a specific form structure instead of void*) . 
• 

* context - request context 

* form - pointer to form-specific structure 

* No return value 
•/ 

Uifndef _cplusplus 

typedef void EwaFormServe_f { ) ; 

*else /♦ cplusplus */ 

typedef void EwaFormServe_f ( EwsContext context, void * form ) ; 
#endif /* cplusplus •/ 

/• 

* Application Form Submit Function 

* Processes submitted form. (We comment out the prototype 

* to avoid compiler warnings — the actual application functions define 

* a specific form structure instead of void*). 
* 

. * context - request context 

* form - pointer to form-specific structure 
• 

* Returns NULL for default response to Berver (accepted) , or redirection URL. 
*/ 

frifndef cplusplus 

typedef char * EwaFormSubmit_f ( ) ; 
fcelse /• cplusplus ♦/ 

typedef char • EwaFormSubmit^f ( EwsContext context, void * form ); 
*endif /• cplusplus ♦/ 

/• 

* Form Field Types 

* Each field element has a type associated with it. Each type has conversion 

* routines to handle conversions between HTML and internal representations. 

* NOTE: if you modify this enum list, you MUST update the FieldMap in 

* file ewc_code.c! 1 
•/ 

typedef enum EwFieldType^e 

ewFieldTypeDecimalOverride ■ 0 /* unsigned decimal integer */ 
,ewFieldTypeRadio /• radio button - serve setup and submit •/ 

iewFieldTypeRadioField /* radio fields - used in serving form •/ 
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, ewFieldTypeselect 
, ewFieldTypeSelectField 
,ewFieldTypeSelectMulti 
, ewFieldTypeCheckbox 
, ewFieldTypeText 
, ewFieldTypelmage 
,ewFieldTypeDecimalUint 
, ewFieldTypeDecimallnt 
, ewFieldTypeHexInt 
, ewFieldTypeHexString 
, ewFieldTypeDottedIP 
, ewFi e 1 dTypel EEEMAC 
, ewFi el dTypeFDDIMAC 
, ewFieldTypeS tdMAC 
, ewFieldTypeDecnetIV 
, ewFieldTypeFile 
, ewFi e 1 dTypeTex t Ove rr i d e 
, ewFieldTypeObjectlD 
.ewFieldTypeMAX 
3 EwFieldType; 
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select enum - serve setup and submit */ 

select enum fields - used in serving form •/ 

multiple select */ 

checkbox */ 

text field ♦/ 

image field •/ 

unsigned integer */ 

signed integer •/ 

hexadecimal integer */ 

hexadecimal string */ 

dotted IP address •/ 

IEEE MAC •/ 

FDDI MAC */ 

Standard MAC •/ 

Decnet IV Address */ 

input type file handle */ 

serve input file name field */ 

object identifier •/ 

MUST BE LAST •/ 



* Form Field Representation 

* The compiler generates the following structure for each element in the 

* form. In general* a FORM document node is placed in the archive at the 

* offset immediately following a VALUE= in TEXT, TEXTAREA, HIDDEN, or PASSWORD 

* field. The field component of the form node index refers to a field 

* structure as defined below. The' field type would be ewFieldTypeText, or 

* one of the derivative extended types such as ewFieldToDottedlP. If a 

* VALUE was specified in the source HTML, the compiler translates it into 

* the appropriate internal representation and creates the def ault_value of 

* the field. (For ewFieldTypeText, this is simply a pointer to the null 

* terminated string. For other fields, this is a pointer to a value whose 

* length is determined by the type in ewFieldTable) . The NAME« part of 

* the field is saved, and the offset into the compiler-generated form for 

* the value and status portions of the field is stored in value_offset and 

* status_of f set. 

* Checkboxes and multiple selections are fairly straight forward. 

* The type ewFieldCheckbox or ewFieldSelectMulti is used, and the 

* node appears where the word "CHECKED 1 ' or "SELECTED" may appear. If a 

* VALUE" is present, it is saved in the sel_yalue field. Otherwise, these 

* types are identical to the extended text types above. 

* Radio buttons and single-select boxes are more complex, with a single 

* NAME=, there may be multiple VALUE" where only one applies to the actual 

* value of the form field, with N radio buttons or single select options, 

* the compiler generates N+l field structures. One structure is used to 

.* read and write the value in the internal generated form. This would have 

* type ewFieldTypeRadio or ewFieldTypeS elect, contain the default value, 

* offsets into the form structure, and the field name. In addition, an array of 

* integers containing all values corresponding to the generated enumerator is 

* saved in enum_li8t. The other N field structures. would represent each radio 

* button or select option and have the type ewFieldTypeRadioField or 

* ewFieldTypeSelectField. These are referenced by form nodes in the document 

* archive at the location corresponding to where a "CHECKED" or "SELECTED" 

* keyword would be inserted. They would not have a name field. Instead, 

* the enum_value field would be set to the VALUE c enumeration corresponding 

* to the specific field. 
•/ 

typedef struct EwFormFi e 1 d_s 
{ 

EwFieldType field_type; /• type of field •/ 

const void *def ault_value; /• p inter to default value */ 

uintf value__of fset; /• offset to value in form struct */ 
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status_of fset; /• offset to status in form struc*: •/ 



♦name ; 
*enum_list; 
enum_value ; 
*sel__value; 
EwFormFieldP; 



/* name of field from NAME="" •/ 

/• list of field values by enum •/ 

/* SELECT /radio value of field */ 

/• SELECT multiple value field ♦/ 



Form Representation 

The following structure represents an KTML FORM. This points to the 
application-provided serve and submit functions, indicates the size 
of the compiler-generated form structure, and points to a table of 
field structures as defined above. 



typedef struct EwFomEntry_s 



{ 



EwaFormS erve_f 
EwaFormSubmi t_f 
uintf 
uintf 

const EwFormField 



*serve_f ; 
* submi t_f ; 
form_si2e; 
f ield_count? 
*field_list; 



/• application serve function * 
/♦ application submit function 
/* sizeof form structure */ 
/* number of fields in form */ 
/* list of fields •/ 



} EwFormEntry, * EwFormEntryP; 



Document Node Conversion Macros 

These macros convert between the 32-bit node index and a form and element 
index. 



ttdefine ew_form_element_start 

Jtdefine EW_FORM_ELEMENT_END 

#define EW_FORItJJ0DE_INDEX_TO_FORM_INDEX (i) 

fldefine EW_FORM^ODE_IOTEX_TO_ELEMENT_INDEX(i) 

^define ew_formlelement_TO_JJODE_index < f , e) 



(0) 

(Oxffff ) 
((i) » 16) 
{(i) & Oxffff) 
(((f) « 16) | 



(e) ) 



/' 

* Form conversion functions. 

* The "To" function converts to HTML ASCII format from the internal 

* representation and writes it directly to the output data stream. 

* The "From 11 function converts from HTML ASCII contained in a parsed network 

* buffer EwsString and converts it to the internal representation. 
V 

typedef void EwFieldTypeTo_f 

C EwsContext context, const EwFormField # f ield ) ; 
typedef void EwFieldTypeFranuf 

( EwsContext context, const EwFormField *field, EwsStringP stringp ); 
typedef void BwFieldTypeFree_f ( void *p ) ; 

tifdef E^LCONFIC.OPTION.FIELDTYPE_RADIO 

extern EwFieldTypeTo_f ewFieldToRadioField; 

#endif /• EW_CONFIC_OPTlON_FIELDTYPEL-RADIO */ 

*if defined (EW_CONFIC.OPTION_FIELDTyFE_RADIO) \ 

1 1 defined (EW.COOTIC_OPTIOIiJTEU)TyPEL.SELECT_SINGLE) 
extern EwFieldTypeFrom_f ewFieldFromRadio; 
♦endif /• EW_CONFIG_OPTIOrL.FIELDTyPELMDIO j SELECT_S INGLE ♦/ 



tifdef EW.MNFIG_OPTION_FIELDTyPEL.SELECTJINGLE 
extern BwFieldTypeTo_f ewFieldToSelectField; 
♦endif /• EW_C0NFI C_OPTI OIi_FIELDTYPELSELECT_S INGLE ♦/ 

*ifdef EW_CONFI G_OPTION_FI ELDTYP £_SELECT_MULTI PLE 
extern EwFieldTypeTCL.f ewFieldToSelectMulti; 
extern EwFieldTypeFrom_f ewFieldFromSelectMulti; 
#endif /• EW_CONFI G_0PTI OJ^_FIELDTYP 5_S ELECT^MU LTI PLE */ 
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ttifdef EW_COr^IG_OPTION_FIELDTYPE_CHECKBOX 
extern EwFieldTypeTo_f ewFieldToCheckb x; 

extern EwFieldTypeFrom_f ewFieldFromChecxbox; 
tendif /• EW_CONF I G_OPT I OH_FX ELDTYP E_CHECKBOX •/ 

ft i f def EW_C0NFI G_OPTI OILJI ELDTYP ELCHECKBOX 
extern EwFieldTypeTo_f ewFieldToText; 
extern EwFieldTypeFronu* ewFieldFromText; 
extern EwFieldTypeFree_f ewFieldFreeText; 
ftendif /• EW_CONFIQ_OPTIOR_FIELDTYPEL-CKECKBOX •/ 

extern EwFieldTypeTo_f ewFieldToDecimalUint; 

ft if def EW_CONFlG_OPTION_FIELDTYP£_IMAGE 

extern EwFieldTypeFronL_f ewFieldFromlmage; 

ftendif /* EW_CONFI G_OPTI DN_FI E LDTYP E_IMAG E •/ 

ftif defined (EW_CONFIG_OPTIOH-FIELDTyPE_DECIMAI^UINT) \ 
| | defined (EW_CONFIG.OPTION_FIELDTyPE_DECIMAl^INT)\ 
| | defined (E*CCONFIG_OPTXOJCFIELDTYP£_XMAGE) 

extern EwFieldTypeFron\_f ewFieldFromDecimal ; 

ftendif /• EW.CONFIG.OPTI ON_FX ELDTYP E_DECIKAL_UI NT (INT I IMAGE 

ftif def EW_CONFIG_OPTION_FIELDTYPE_DECIMAl^XNT 
extern EwFieldTypeTO_f ewFieldToDecimallnt ; 

ftendif /* £W_CONFIC_OPTI ON_FX ELDTYP E_DECXMAL_INT •/ 

ftifdef EW_C0NFIG_0PTlOr*_FI£LDTYPE_HEX_INT 
extern BwFieldTypeTcuf ewFieldToHexlnt ; 

extern EwFieldTypeFron\_f ewFieidFromHexInt ; 

ftendif /* EW_CONFXG_OPTION_FIELDTYP£_HEX_XNT •/ 

ftifdef EW_CONFIG_OPTXON_FXELDTYPS_HEX_STRING 
extern EwFieldTypeTcuf ewFieldToHexString; 
extern EwFieldTypeFrom_f ewFieldFromHexString; 
extern EwFieldTypeFree_f ewFieldFreeHexString; 
ftendif /* EW_CONFIC_OPTION_FIELDTYPE u _HEX_STRING •/ 

ftifdef EW_ C0NFI G_0PTI 0N_FI ELDTYP E_D OTTEDI P 
extern EwFieldTypeTo_f ewFieldToDottedIP; 
extern EwFieldTypeFron\_f ewFieldFromDottedlP; 
ftendif /* EW_CONFIG_OPTION_FIELDTYPE_D0TTEDIP •/ 

ftifdef EWLCONFIG_OPTIOK_FIELDTYPELJ»ECNET_IV 
extern EwFieldTypeTo_f ewFieldToDecnetIV; 
extern EwFieldTypeFronuf ewFieldFromDecnetlV; 
ftendif /• EW_CONFIG_OPTION.FI ELDTYP E_DECNET_IV •/ 

ftif defined ( EW_C0NFI G_OPTXOK_FI ELDTYP 5_IEEE_#AC ) \ 
| | def ined {EW_CONFIG_OPTIO>L-FIELDTYP£LJDDI^MAC) \ 
|| defined (EW_CONFIGLOPTIOICFIEU?TYPEL3TD^1AC) 

extern EwFieldTypeFrbrtL-f ewFieldFrcanMAC; 

ftendif /• EW_CONFIG_0PTION_FIELDTYP£_XEEE | FDDI | STD_J1AC */ 

ftif defined (EW CONFIGLOPTIOK-FIELDTYPHLIEEELHAC) \ 

|| defined (EW.CONFIG.OPTION^FIELDTYPELSTD^MAC) 
extern EwFieldTypeTo_f ewFi el dToIEEEMXC ; 

flendif /* EW_CONFX G_OPTI ON_FI ELDTYP EL_I EEE | STD_JiAC */ 

ftifdef EW_CONFIG_OPTIOfl_FI ELDTYP EL.FDDI_JiAC 
extern EwFieldTypeTcu* ewFieldToFDDIMAC; 
ftendif /* EW_COr^G_OPTION-J^ELDTYPE_FDDI^IAC */ 

ftifdef EW CONFI G_0PTI ON_FI ELDTYP £_STD_MAC 

extern EwFieldTypeFronuf ev/FieldFromStdMAC; 
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*endif /• EW.CONFIC_OPTIOICFIELDTyPEL.STD_KAC •/ 

*ifdef BW_C0NFIC_OPTIOIi.FIELDTyPEL.FILE 
extern EwFieldTypeFrom_f ewFieldFromFile; 
extern EwFieldTypeFree_f ewFieldFreeFile; 
*endif /• EW_CONFIG_OPTIOI*_FIELDTYPE_FILE •/ 

#ifdef EW_C0NFIG_0PTXO*l_FIELDTyPE_OID 
extern EvFieldTypeTo_f ewFie.ldToObjectID; 
extern BwFieldTypeFrom_f ewFieldFromObjectlD; 
extern EwFieldTypeFree_f ewFieldFreeObjectID; 
*endif /* EW_CONFIG_OPTXON_FIELDTYPE_OID ♦/ 



typedef struct EwFormFieldTable.. s 



{ 



uintf 

EwFieldTypeTo_f 
EwFi eldTypeFronuf 
EwFi el dTypeFree.f 
EwFormFieldTable ; 



fiel<i_size; 
•to_f ; 
*f rom_f ; 
*free_f ; 



/• size of field •/ 

/• convert to HTML •/ 

/* convert from HTML •/ 

/* free dynamic pointer •/ 



*ifdef EW_DEFINE_FIELD_TVTPE_TABLE 

const EwFormFieldTable ewFormFieldTable [) « 



{ sizeof (uint32) , ewFieldToDecimalUint , 



NULL, 



NULL ] 



ifdef EW_C0NFIG_0PTIONJF , IELDTYPE_RADIO 

, { sizeof (int) , NULL, 

, { o, ewFieldToRadioField, 

else /• EW_C0NF I G_OPTI ONLFI ELDTYP E_RAD I O •/ 

, { 0, NULL, 

, { 0, NULL, 

endif /* EW_CONFIG_OPTI0N_FIELDTYPE_RADI0 */ 



ewFieldFromRadio, NULL ) 

NULL, NULL ) 

NULL, NULL ) 

NULL, NULL ) 



ft ifdef EW_CONFI G_OPTI ON_FIELDTYP E_SELECT_S INGLE 

, { sizeof (int) , NULL, ewFieldFromRadio, NULL } 

, [ 0, ewFieldToSelectField, NULL, NULL ] 

# else /* EW_CONFIC_OPTION_FIELDTYPE_SELECT_SINGLE •/ 

, { 0, NULL, NULL, NULL ) 

, { 0, NULL, NULL, NULL } 

# endif /• EW_C0NFI G_OPTI Ol^__FI ELDTYPE_S ELE CT_S INGLE */ 

« ifdef £W_C0NFIG_0PTIOJUFIELDTYPE^SELECT_MULTIPLE 

,{ sizeof (boolean) , ewFieldToSelectMulti, ewFieldFromSelectMulti.NULL ) 
ft else /* EW_CONFILOPTIOIUFIELDTyPELSELECr_MULTIPLE ♦/ 

, { 0, NULL, NULL, NULL ) 

ft endif /* EW_CONFIG_OPTIOICFIELDTyP^SELECT_KULTIPLE ♦/ 

ft ifdef EW_C0NFIGL_OPTION-J , IELDTYPE_CKECKBOX 

, ( sizeof (boolean) / ewFieldToChecXbox, ewFieldFromCheckbox, NULL ) 
ft elBe /♦ EW_CONFI G_0PTI OK_FX ELDTY P ^CHECKBOX •/ 

# { 0, NULL, NULL", NULL ) 

ft endif /• EW_CONFI G_OPTI ON_FI ELDTYP ELCHECKBOX •/ 

ft ifdef EWLC0NnG.0PTIOH_FIELDTyP5.TEXT 

,( sizeof (char •), ewFieldTpText, ewFieldFromText,ewFieldFreeText ) 

ft else /• EW CONFIC.OPTIOIi.FIELDTyPE_TEXT */ 

, [ 0, NULL, NULL, NULL } 

ft endif /* EW^CONFIG.OPTION-FIELDTyPELTEXT */ 

ft ifdef EW_C0NFIG_0PTION_FIELDTYPE_IMAGE 

, I sizeof (uint32) , NULL, ewFieldFromDecimal, NULL) 

# else /♦ EW.CONFIG_OPTION_FIELDTyPE.IMACE */ 

, ( 0, NULL, NULL, NULL ) 
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ft endif /• EW_CONFIG.OPTIO^FIEIZrTYPE_rMAGE */ 

ft ifdef EW_CttNFIG_OPTIO*_FIEU)TYPE_DECIMAL_UINT 

, { sizeof (uint32) , ewFieldToDecimaluinl, ewFieldFromDecimal , NULL ) 
ft else /• EW_CONFIG_OPTION_FIELDTYPE_DECIMAL_UINT */ 

. ( 0, NULL, NULL, NULL ) 

ft endif /♦ EW_CONFI G.OPTI ON_FI ELDTYP E_DECIMAL_U INT •/ 

ft ifdef EW_CONFI G.OP TI ON.FI ELDTYP E_DE C IMAL<_I NT 

, { sizeof (uint32), ewFieldToDecimallnt, ewFieldFromDecimal, NULL ) 
ft else /• EW_CONFI G.OPTI OI.FI ELDTYP E_DECIMAL.INT •/ 

*{0, NULL, ~ NULL, NULL ) 

ft endif /♦ EW_CONFIC_OPTIOI.FXEa£)TYPELJ)ECIMAL_INT »/ 

ft ifdef EW_CONFIG.OPTXOH_FIELDTyPE_KEX.INT 

, { sizeof (uint32), ewFieldToHexlnt, ewFieldFromHexlnt, NULL } 

ft else /* EW_C0NF I G_0 PTI ON.FI ELDTYP E_HEX_I NT •/ 

• I 0' NULL, NULL, NULL } 
ft endif /* E>_CONFIG_OPTIOr^FIEU>TYPI_HEX_INT •/ 

ft ifdef EW_C0NFIG_0PTI0I^FIELDTYPE_KE^5TRING 

,{ sizeof (EwsForroFieldHexString) , ewFieldToHexString, ewFieldFromHexString, 
ewFieldFreeHexString ) 
ft else /* EW_CONFIG_OPTION_FIELDTYPE_HEX_STRXNG */ 

*{ 0, NULL, NULL, NULL ) 

ft endif /♦ EW_CONFICL.OPTI01^FXELDTYPEL_HEX_STRING •/ 

ft ifdef EW_CONFXG.OPTION_FIELDTYFE_DOTTEDIP 

,{ sizeof (uint32) , ewFieldToDottedlP, evFieldFromDottediP, NULL ] 

ft else /• EW_C0NFI G.OPT I ON.FI ELDTYP E.D0TTED I P •/ 

• 10. NULL, NULL, NULL J 
ft endif /* EW_CONFIG_OPTION_FIELDTYP£.DOTTEDIP •/ 

ft ifdef EW_CONFIG.OPTION-.FlELDTYPE_IEEE_>IAC 

ewFieldToIEEEMAC, ewFieldFramMAC, NULL J 

ft else /• EW_CONFIC.OPTION_FXELDTYPE.IEEE_MAC •/ 

• ( 0, NULL, NULL, NULL } 

ft endif /♦ ew_config_opti on.fi eldtype.ieee_mac */ 

ft ifdef ew_confxg.optxon.fieldtypel.fddi.mac 

.( ^ ewFi e 1 dToFDDXMAC , ewFieldFromMAC, NULL ) 

ft else /• EW_CONFIG.OPTION_FIELDTYPE.FDDI _mac */ 

*10, NULL, NULL, NULL ] 

ft endif /» EW_C0NFXC.0PTI0N_FXELDTYPE_FDDI.J1AC •/ 

ft ifdef EW_CQNFIG.OPTIONJTCELDTYPS.STD.MAC 

. I 6. ewFieldToIEEEMAC, ewFieldFromStdMAC, NULL ) 

ft. else /• EW_C0NFIG.0PTI0U_FIELDTYP5_STD.MAC */ 

• i 0, NULL, NULL, NULL ) 

ft endif /* EW_CONFIG_OPTION.FIELDTYPE.STD _MAC •/ 

ft ifdef EW_C0NFICL0PTI01_FIELDTYPE_DECNET.IV 

,{ sizeof (uintl6>, ewFieldToDecnetlv, evFieldFromDecnetrv, NULL } 

ft else /• EW_C0NFIQ_0PTI0*LFI ELDTYP5JECNET.lv •/ 

*l 0, NULL, NULL. NULL ) 

ft endif /* EW_CONFI G_0PTI OJ^FI ELDTYP E_DECNET_I V •/ 

ft ifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 

A sizeof (BwaFileHandle), NULL, ewFieldFromFile,ewFieldFreeFile ) 

,( sizeof (char *), ewFieldToText, ewFieldFromText,ewFieldFreeText ) 

ft else /• ! EW_C0NFIG.OPTION_FIELDTYPE.FILE •/ 

A 0, NULL, NULL, NULL ) 

* \ 0, NULL, NULL, NULL ) 

ft endif /* EW_CONFI G.OPTI 0N.FX ELDTYP E_FI LE •/ 
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« ifdef EW_CONFIG.OPTIOIL-FIELDTYPEL.OID 

, { si2eof (EwsFormFieldObjectID) , evFieldToObjectID, ewFieldFromObjectrD, 
ewFieldFreeObjectID ) 

* else /• EW_CONFIG_OPTION_FIELDTYFE_OID •/ 

, { 0, NULL, NULL, NULL ) 

# endif /• EW_CONFIG_OPTIOIL.FIELDTyPE.OID •/ 

); 

flelse /• EW_DEFINE_FORM_FI ELD.TYP E_TABLE */ 
extern const EwFormFieldTable ewFormFieldTable [) ; 
*endif /• EW_J)EFINE^FOR>L_FI ELD_TYP I^JTAB LE */ 

*endif /• _EW_FORM_H •/ 
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/• 

* *Xd: ew_imap.h,v ^7 1997/05/21 21:55:48 ian Exp * 

* Pr duct: EmWeb 

* Release: *Name: $ 
• 

* %CopyRight% 
* 

* EmWeb image map definitions between server and generated code 
V 

*ifndef _EW_JMAP_H 
H define _EW__imap_H 

^include * ew_ types .h" 

typedef struct EwimageMap_s 

uint32 ul^x; /• upper-left X coordinate •/ 

uint32 ul_y ; /• upper-left Y coordinate ♦/ 

uint32 lr_x; /* lower-right X coordinate •/ 

umt32 i r _y; /* lower-right V coordinate •/ 

const char *url ; /• relative redirection URL •/ 

} EwImageMap, • EwIroageMapP; 

typedef struct EwimageMapTable_s 

const EwImageMap ♦map.table; /• table of map entries •/ 
uintf map.entries; /* size of map table •/ 

1 SS?!. 6 ;? e£ault - ur1 -- /• default UrC or NULL if not specified */ 

J EwlroageMapTable, ♦ EwimageMapTableP; K iea ' 

#endif /♦ _ew_imap_h •/ 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



- 182- 



PCT/US97/13817 



CLAIMS 

What is claimed is: 

1 . A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

including at a location in the document a code tag containing a segment of application 
source code; 

serving the text document to a client which interprets the mark-up language; and 
when the location is encountered, serving to the client a sequence of characters derived 

from a result of executing a sequence of instructions represented by the segment of app lication 

source code. 

2. The method of claim 1 , further comprising the step of: 

including in the document at least one more code tag containing a segment of application 
source code. 

3. The method of claim U wherein the step of defining further comprises the step of: 
providing a plurality of documents which collectively define the graphical user interface; 

and 

storing the text document and the plurality of documents as files in a directory tree. 

4. The method of claim 3, further comprising the steps of: 

compiling the directory tree and the files therein into an archive including content 
sources; and 

decompiling a content source back into the text document before the step of serving. 

5. A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document v/ritten in a 
mark-up language; 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 PCTYUS9 7/138 17 

-183- 

including in the document a string identified by prototype tags; 

serving the text document to a prototyping client which interprets the mark-up language 
but does not recognize and does not display the prototype tags, but does display the siring; and 

compiling the text document into a content source, omitting the prototype tags and the 
string identified thereby. 

6. The method of claim 5, further comprising the step of: 

including at a location in the document a code tag containing a segment of application 
source code, wherein the prototyping client does not recognize and does not display the code tag; 
and 

the step of further comprising including the segment of application source code in the 
content source. 

7. The method of claim 6, further comprising the steps of: 
decompiling the content source into a replica of the text document; 
serving the replica to a user client; and 

when the location is encountered in the replica, serving to the user client a character 
stream derived from a result generated by executing the segment of application source code. 

8. The method of claim 7, further comprising the steps of: 

including in the document at least one more code tag containing a segment of application 
source code; and 

including in the document at least one more string identified by code tags. 

9. A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

including at a location in the document a code tag containing a segment of application 
source code; 

including in the document a string identified by prototype tags; 
compiling the text document into a content source; 
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decompiling the content source into a replica of the text document; 

serving the replica of the text document to a client which interprets the mark-up language; 

and 

when the location is encountered in the replica, serving to the client a character stream 
generated by executing the segment of application source code. 

1 0. The method of claim 9, further comprising the steps of: 

including in the document at least one more code tag containing a segment of application 
source code; and 

including in the document at least one more string identified by code tags. 

11. A software product recorded on a medium, the software product comprising a mark-up 
language compiler which can compile a mark-up language document into a data structure in a 
native application programming language, the compiler recognizing one or more code tags which 
designate included text as a segment of application source code to be saved in a file for 
compilation by a compiler of the native application programming language. 

12. A method for providing a graphical user interface having displayed forms for entry of 
data, comprising the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

naming in the document a data item requested of a user and used by an application 
written in a native application programming language; and 

compiling the text document into a content source including a data structure definition in 
the native application programming language for the named data item. 

13. The method of claim 12, wherein the text document is viewed using a prototype client 
during development and is viewed using a user client during use, further comprising the steps of: 

naming the data item within a tag understood in the mark-up language for viewing by 
both the prototype client and the user client; and 
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including in the content source a definition of a function to provide a default value for the 
data item when the content source is served and a definition of a function to perform an 
application specific operation when the data item is returned by the user client. 

14. In a computer-based apparatus for developing a graphical user interface for an application, 
the apparatus including an editor which can manipulate a document written in a mark-up 
language and a viewer which can display a document written in the mark-up language, the 
apparatus further comprising: 

a mark-up language compiler which recognizes a code tag containing a source code 
fragment in a native application source code language, the code tag not otherwise part of the 
mark-up language, the compiler producing as an output a representation in the native application 
source code language of the document, including a copy of the source code fragment. 

15. The apparatus of claim 14, wherein the mark-up language compiler further recognizes 
begin and end prototype tags not otherwise part of the mark-up language, the output 
representation omitting the begin and end prototype tags and all content appearing therebetween 
in the document. 

16. A method for developing and prototyping graphic user interfaces for an application 
comprising the steps of: 

accessing an HTML file, 

encapsulating portions of said HTML and entering source code therein, 
producing a source module from said HTML with encapsulated portions, 
producing source code for a server, and 

cross compiling and linking said application, said source code module and said server 
thereby producing executable object code. 

1 7. The method of claim 16, further comprising the steps of: 
running said object code, 

executing said compiled encapsulated code when requested by a viewer, wherein said 
encapsulated code is associated with said application. 
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1 8. The method of claim 1 7, further comprising the steps of: 

converting data returned by execution of said compiled encapsulated code into a form 
displayable by said viewer. 

19. The method of claim 18, wherein the data returned by executing said compiled 
encapsulated code changes over time as a result of changes within the application. 

20. A data structure fixed in a computer readable medium, the data structure for use in a 
computer system including a client and a server in communication with each other, the data 
structure comprising: 

cross-compiled, stored and linked, HTML files with encapsulated portions containing 
executable code associated with said application, server code, and application code, wherein said 
executable code is run when the HTML file is served thereby providing real time dynamic data 
associated with said application. 
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